SafeDep Blog company blog

Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised

A compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds…
Points
391
HN comments
313
Submissions
1
Cited by
0 commenters

Security & PrivacySoftware Engineering2026

On Hacker News

SubmittedTitle on HNPointsComments
May 19, 2026Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised by theanonymousone391313

More from SafeDep Blog

All 4 posts →

Related posts from the same era