Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft 

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft 

SecurityVendor
Yanac

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, and 1Password platforms.
The post Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft appeared first on Microsoft Security Blog.Microsoft Security BlogRead More