SafeDep Blog company blog
Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
A compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds…
- Points
- 391
- HN comments
- 313
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| May 19, 2026 | Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised by theanonymousone | 391 | 313 |