Hackers Compromise @antv Packages in Mini Shai
Source: Cybersecuritynews
Published:
<p>A sweeping supply chain attack has hit the npm ecosystem, compromising hundreds of widely used JavaScript packages tied to the @antv data visualization library. The attack, which unfolded in the early hours of May 19, 2026, injected malicious code into packages used by millions of developers worl