← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Active Supply Chain Attack Compromises Packages on npm
WHITE Tr1sa111 2026-05-20 Modified: 2026-05-20
3
IOCs
LOW VOLUME
mini shai-huludcredential theft@antv packagessupply chain attacknpmecharts-for-reactgithub exfiltrationci/cd compromise
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Mini Shai-Hulud
Indicators of Compromise (3)
All FileHash-SHA1 URL hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 1916faa365f2788b6e193514872d51a242876569 — 2026-05-20
URL https://t.m-kosche.com:443/api/public/otel/v1/traces — 2026-05-20
hostname t.m-kosche.com — 2026-05-20
References (1)
↗ https://socket.dev/blog/antv-packages-compromised