--- title: Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages... description: A threat group called TeamPCP compromised the 'atool' npm maintainer account and published 637 malicious versions across 323 packages in the @antv data... canonical: https://daily.dev/posts/mini-shai-hulud-hits-antv-300-malicious-npm-packages-published-via-compromised-maintainer-account-kixznqqun twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account | daily.dev og:description: A threat group called TeamPCP compromised the 'atool' npm maintainer account and published 637 malicious versions across 323 packages in the @antv data... og:url: https://daily.dev/posts/mini-shai-hulud-hits-antv-300-malicious-npm-packages-published-via-compromised-maintainer-account-kixznqqun og:image: https://api.daily.dev/og/posts/KixznQQUN.png og:image:alt: Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account **[Snyk](https://daily.dev/sources/snyk)** · 11 min read · 0 upvotes · 0 comments ## Summary A threat group called TeamPCP compromised the 'atool' npm maintainer account and published 637 malicious versions across 323 packages in the @antv data visualization ecosystem in a 22-minute automated burst on May 19, 2026. The malware harvests over 80 types of credentials (AWS, GCP, Azure, GitHub, npm tokens, SSH keys, database strings), exfiltrates them via encrypted channels disguised as OpenTelemetry traces, installs persistent backdoors (Claude Code session hooks, VS Code tasks, systemd/LaunchAgent daemons), and self-propagates by stealing npm publish tokens. A notable technique involves forging Sigstore/SLSA Build Level 3 provenance attestations by abusing GitHub Actions OIDC tokens, demonstrating that valid attestations don't guarantee pipeline integrity. Remediation requires removing persistence mechanisms before revoking tokens, reinstalling with --ignore-scripts, rotating all credentials, and auditing GitHub for injected workflows. This is Wave 5 of the ongoing Mini Shai-Hulud campaign active since September 2025. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised](https://daily.dev/posts/mini-shai-hulud-strikes-again-317-npm-packages-compromised-u2ptexbxr) · Hacker News · 2 upvotes · 0 comments - [Shai-Hulud: Here We Go Again. Mass npm Supply Chain Attack Hits the AntV Ecosystem](https://daily.dev/posts/shai-hulud-here-we-go-again-mass-npm-supply-chain-attack-hits-the-antv-ecosystem-nq51smsqn) · StepSecurity · 1 upvotes · 0 comments - [Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages](https://daily.dev/posts/mini-shai-hulud-strikes-again-npm-worm-compromises-hundreds-of-antv-packages-gsrjcznzd) · Aikido Security · 0 upvotes · 0 comments - [New Shai-Hulud malware wave compromises 600 npm packages](https://daily.dev/posts/new-shai-hulud-malware-wave-compromises-600-npm-packages-fc6izpxyv) · BleepingComputer · 5 upvotes · 1 comments - [AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks](https://daily.dev/posts/antv-data-visualization-tool-the-latest-to-be-hit-by-ongoing-npm-supply-chain-attacks-qb3fstdma) · InfoWorld · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#malware](https://daily.dev/tags/malware), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/mini-shai-hulud-hits-antv-300-malicious-npm-packages-published-via-compromised-maintainer-account-kixznqqun) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account","url":"https://daily.dev/posts/mini-shai-hulud-hits-antv-300-malicious-npm-packages-published-via-compromised-maintainer-account-kixznqqun","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/mini-shai-hulud-hits-antv-300-malicious-npm-packages-published-via-compromised-maintainer-account-kixznqqun"},"datePublished":"2026-05-19T08:43:03.486Z","dateModified":"2026-05-19T08:43:29.251Z","description":"A threat group called TeamPCP compromised the 'atool' npm maintainer account and published 637 malicious versions across 323 packages in the @antv data...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c3450a40559489ddb93b51437dddc03f?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c3450a40559489ddb93b51437dddc03f?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Snyk","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Snyk","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/8fb2a7b471c04bac9af29fbeb3ed1cf6","url":"https://daily.dev/sources/snyk"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/mini-shai-hulud-hits-antv-300-malicious-npm-packages-published-via-compromised-maintainer-account-kixznqqun","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,malware,npm","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Snyk","item":"https://daily.dev/sources/snyk"},{"@type":"ListItem","position":3,"name":"Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account"}]} ```