Rot13
Jung vs Antv jnf gur bar gb svaq Xnangn’f qvnel vafgrnq bs Ubgneh, naq guvf jnf nsgre Znubeb’f erfbyir gb pbagvahr orvat va zvyyfntr
Jung vs Antv jnf gur bar gb svaq Xnangn’f qvnel vafgrnq bs Ubgneh, naq guvf jnf nsgre Znubeb’f erfbyir gb pbagvahr orvat va zvyyfntr
September 27, 2026 at 1:48 PM
Rot13
Jung vs Antv jnf gur bar gb svaq Xnangn’f qvnel vafgrnq bs Ubgneh, naq guvf jnf nsgre Znubeb’f erfbyir gb pbagvahr orvat va zvyyfntr
Jung vs Antv jnf gur bar gb svaq Xnangn’f qvnel vafgrnq bs Ubgneh, naq guvf jnf nsgre Znubeb’f erfbyir gb pbagvahr orvat va zvyyfntr
Ohg nyfb vg vasbezf Znubeb’f bja npgvbaf. Fur vf qrfgeblvat urefrys sbe gur fnxr bs Xnangn’f qernz, sbe gur fnxr bs Xnangn’f unccvarff. Antv gbb vf sbetbvat ure bja unccvarff pbafgnagyl sbe gur fnxr bs Znubeb.
September 28, 2026 at 1:51 PM
Ohg nyfb vg vasbezf Znubeb’f bja npgvbaf. Fur vf qrfgeblvat urefrys sbe gur fnxr bs Xnangn’f qernz, sbe gur fnxr bs Xnangn’f unccvarff. Antv gbb vf sbetbvat ure bja unccvarff pbafgnagyl sbe gur fnxr bs Znubeb.
gur beqre vf znubeb antv angfhzr ubgneh ubhxn naq v'ir arire orra zber fher bs fbzrguvat va zl yvsr
September 27, 2026 at 1:18 AM
gur beqre vf znubeb antv angfhzr ubgneh ubhxn naq v'ir arire orra zber fher bs fbzrguvat va zl yvsr
Microsoft is investigating a new, emerging Mini Shai-Hulud npm supply chain attack targeting antv packages. Attackers compromised an antv maintainer account and published malicious versions of multiple widely used packages (for example, antv/g2).
May 19, 2026 at 7:39 AM
Microsoft is investigating a new, emerging Mini Shai-Hulud npm supply chain attack targeting antv packages. Attackers compromised an antv maintainer account and published malicious versions of multiple widely used packages (for example, antv/g2).
🚨 BREAKING: Socket is investigating an active npm supply chain attack compromising hundreds of packages in the @antv ecosystem.
The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.
The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.
May 19, 2026 at 2:59 AM
🚨 BREAKING: Socket is investigating an active npm supply chain attack compromising hundreds of packages in the @antv ecosystem.
The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.
The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.
This is a developing story. We’ve embedded the affected package list from Socket’s campaign page and will keep updating as more versions and payload details are confirmed. socket.dev/blog/antv-pa...
Active Supply Chain Attack Compromises @antv Packages on npm...
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.
socket.dev
May 19, 2026 at 2:59 AM
This is a developing story. We’ve embedded the affected package list from Socket’s campaign page and will keep updating as more versions and payload details are confirmed. socket.dev/blog/antv-pa...
La isla Martin García fue un campo de concentración durante la llamada "campaña del desierto".
Se denuncia ante la Justicia delitos de lesa humanidad contra los pueblos originarios en la Isla Martin García durante la Conquista del Desierto.
La Comunidad Indígena Mapuche-Rankel Rupu Antv denunció ante la Justicia Federal de La Plata los crímenes de lesa humanidad cometidos en la Isla Martín García durante la Conquista del Desierto, reclam...
naturaleza.ar
August 18, 2025 at 2:13 PM
La isla Martin García fue un campo de concentración durante la llamada "campaña del desierto".
Vg frrzf yvxr gur bayl crefba jub abgvprq fur vf fpurzvat fbzrguvat vf Antv, ohg V guvax fur srryf cbjreyrff gb qb nalguvat nobhg vg, nf fubja jura Znubeb jnf orvat cerffherq gb fcyvg ibpnyf jvgu Ubgneh.
September 25, 2026 at 2:25 AM
Vg frrzf yvxr gur bayl crefba jub abgvprq fur vf fpurzvat fbzrguvat vf Antv, ohg V guvax fur srryf cbjreyrff gb qb nalguvat nobhg vg, nf fubja jura Znubeb jnf orvat cerffherq gb fcyvg ibpnyf jvgu Ubgneh.
V guvax gur bhgpbzr jbhyq or gur fnzr. Antv jvyy gnxr guvf frperg gb ure tenir, ohg v guvax fur jvyy bayl qb guvf sbe Znubeb’f fnxr, abg sbe Xnangn’f be gur onaq’f. Nyy gung znggref abj vf cerfreivat Znubeb’f unccvarff.
September 27, 2026 at 4:05 PM
V guvax gur bhgpbzr jbhyq or gur fnzr. Antv jvyy gnxr guvf frperg gb ure tenir, ohg v guvax fur jvyy bayl qb guvf sbe Znubeb’f fnxr, abg sbe Xnangn’f be gur onaq’f. Nyy gung znggref abj vf cerfreivat Znubeb’f unccvarff.
v guvax antv pbhyq yrnea nobhg vg naq fgnl dhvrg orpnhfr v pybpx ure nf n dhvrg fhssrere ohg vg jbhyq fybjyl pbeebqr ure zvaq hagvy fur unf n ernyyl onq zrygqbja be pevfvf naq yrgf vg nyy bhg gb znubeb. angher jbhyq gnxr vgf pbhefr sebz gura
September 27, 2026 at 1:16 AM
v guvax antv pbhyq yrnea nobhg vg naq fgnl dhvrg orpnhfr v pybpx ure nf n dhvrg fhssrere ohg vg jbhyq fybjyl pbeebqr ure zvaq hagvy fur unf n ernyyl onq zrygqbja be pevfvf naq yrgf vg nyy bhg gb znubeb. angher jbhyq gnxr vgf pbhefr sebz gura
V jnag guvf gb shry zl yvggyr urnqpnaba ng Antv univat guvf fznyy, crggl fcnex bs ungr sbe Xnangn va ure urneg sbe gnxvat fb zhpu nggragvba sebz Znubeb, ohg fur pna’g oevat urefrys gb ungr Xnangn orpnhfr gung’f ure sevraq.
September 27, 2026 at 4:07 PM
V jnag guvf gb shry zl yvggyr urnqpnaba ng Antv univat guvf fznyy, crggl fcnex bs ungr sbe Xnangn va ure urneg sbe gnxvat fb zhpu nggragvba sebz Znubeb, ohg fur pna’g oevat urefrys gb ungr Xnangn orpnhfr gung’f ure sevraq.
Lrnu rvgure jnl fbzrbar'f tbggn or gur fnpevsvpvny ynzo
Vg'f xvaqn shaal phm Antv vf njner bs ure bja srryvatf nobhg rirelguvat naq lrg fgvyy pubbfrf gb cevbevgvmr bguref bire urefrys
Fb va n jnl fur nyernql vf gur rzobqvzrag bs Zvyyfntr
Vg'f xvaqn shaal phm Antv vf njner bs ure bja srryvatf nobhg rirelguvat naq lrg fgvyy pubbfrf gb cevbevgvmr bguref bire urefrys
Fb va n jnl fur nyernql vf gur rzobqvzrag bs Zvyyfntr
September 27, 2026 at 4:19 PM
Lrnu rvgure jnl fbzrbar'f tbggn or gur fnpevsvpvny ynzo
Vg'f xvaqn shaal phm Antv vf njner bs ure bja srryvatf nobhg rirelguvat naq lrg fgvyy pubbfrf gb cevbevgvmr bguref bire urefrys
Fb va n jnl fur nyernql vf gur rzobqvzrag bs Zvyyfntr
Vg'f xvaqn shaal phm Antv vf njner bs ure bja srryvatf nobhg rirelguvat naq lrg fgvyy pubbfrf gb cevbevgvmr bguref bire urefrys
Fb va n jnl fur nyernql vf gur rzobqvzrag bs Zvyyfntr
V guvax vg jbhyq or vagrerfgvat gb uvtuyvtug ure bja crefbany pbasyvpg
Antv frrzf yvxr gur glcr bs crefba jub yvxrf gb qent bgure crbcyr qbja jvgu ure naq erznva va fgntanapr; Va bgure jbeqf, n frpbaq xvaq bs qrngu jurer abguvat pna rire punatr ntnva
Antv frrzf yvxr gur glcr bs crefba jub yvxrf gb qent bgure crbcyr qbja jvgu ure naq erznva va fgntanapr; Va bgure jbeqf, n frpbaq xvaq bs qrngu jurer abguvat pna rire punatr ntnva
September 27, 2026 at 4:13 PM
V guvax vg jbhyq or vagrerfgvat gb uvtuyvtug ure bja crefbany pbasyvpg
Antv frrzf yvxr gur glcr bs crefba jub yvxrf gb qent bgure crbcyr qbja jvgu ure naq erznva va fgntanapr; Va bgure jbeqf, n frpbaq xvaq bs qrngu jurer abguvat pna rire punatr ntnva
Antv frrzf yvxr gur glcr bs crefba jub yvxrf gb qent bgure crbcyr qbja jvgu ure naq erznva va fgntanapr; Va bgure jbeqf, n frpbaq xvaq bs qrngu jurer abguvat pna rire punatr ntnva
onaq shyy bs yvnef... znubeb naq antv qrsvavgryl fgvyy unir gurve pbzcyrkrf haqrearngu vg nyy, naq ubhxn bs pbhefr jvyy xrrc hfvat ubgneh sbe ure bja rzbgvbany checbfrf. bayl angfhzr vf ubarfg va ure bja oyhag naq frys-pragrerq jnl. v srry yvxr gung'yy or vzcbegnag
September 27, 2026 at 6:36 AM
onaq shyy bs yvnef... znubeb naq antv qrsvavgryl fgvyy unir gurve pbzcyrkrf haqrearngu vg nyy, naq ubhxn bs pbhefr jvyy xrrc hfvat ubgneh sbe ure bja rzbgvbany checbfrf. bayl angfhzr vf ubarfg va ure bja oyhag naq frys-pragrerq jnl. v srry yvxr gung'yy or vzcbegnag
vg ernyyl vf cerggl zhpu qbbzrq nf bs abj. vg trgf rira jbefr vs lbh pbafvqre guvf jnf gur orfg pnfr fpranevb sbe rirelbar naq vg pbhyq unir tbar zhpu jbefr. gurl'er yhpxl ubgneh jnf gur bar gung sbhaq bhg nobhg gur synfu qevir naq abg znubeb be antv
September 27, 2026 at 10:05 PM
vg ernyyl vf cerggl zhpu qbbzrq nf bs abj. vg trgf rira jbefr vs lbh pbafvqre guvf jnf gur orfg pnfr fpranevb sbe rirelbar naq vg pbhyq unir tbar zhpu jbefr. gurl'er yhpxl ubgneh jnf gur bar gung sbhaq bhg nobhg gur synfu qevir naq abg znubeb be antv
Das NPM-Ökosystem gerät immer wieder durch Hackerangriffe unter Druck.
Kein Wunder, da wurden auch ein paar sehr fragwürdige Designentscheidungen getroffen, die zu scheunentorgroße Einfallsvektoren führen.
Kein Wunder, da wurden auch ein paar sehr fragwürdige Designentscheidungen getroffen, die zu scheunentorgroße Einfallsvektoren führen.
GitHub und npm unter Beschuss durch Mini-Shai-Hulud
(Bild: Gemini / KI-generiert) TeamPCP schleust über gekapertes Maintainer-Konto Schadcode in AntV-npm-Pakete. Mini-Shai-Hulud stiehlt GitHub-Token und CI/CD-Secrets.
www.security-insider.de
May 27, 2026 at 8:02 AM
Das NPM-Ökosystem gerät immer wieder durch Hackerangriffe unter Druck.
Kein Wunder, da wurden auch ein paar sehr fragwürdige Designentscheidungen getroffen, die zu scheunentorgroße Einfallsvektoren führen.
Kein Wunder, da wurden auch ein paar sehr fragwürdige Designentscheidungen getroffen, die zu scheunentorgroße Einfallsvektoren führen.
Vg pynfurf qverkgyl jvgu Znubeb'f qrfver gb zbir sbejneq naq znvagnva Xnangn'f zrzbel
Fb jung unccraf jura Antv abj xabjf gung fur zrnag gb qvfznagyr vg naq ybjxrl nterrf jvgu vg, ohg nyfb qbrfa'g jnag gb or yrsg va gur qhfg ol Znubeb
Qbrf fur znggre va guvf svtug gb ohea Zvyyfntr gb gur tebhaq
Fb jung unccraf jura Antv abj xabjf gung fur zrnag gb qvfznagyr vg naq ybjxrl nterrf jvgu vg, ohg nyfb qbrfa'g jnag gb or yrsg va gur qhfg ol Znubeb
Qbrf fur znggre va guvf svtug gb ohea Zvyyfntr gb gur tebhaq
September 27, 2026 at 4:13 PM
Vg pynfurf qverkgyl jvgu Znubeb'f qrfver gb zbir sbejneq naq znvagnva Xnangn'f zrzbel
Fb jung unccraf jura Antv abj xabjf gung fur zrnag gb qvfznagyr vg naq ybjxrl nterrf jvgu vg, ohg nyfb qbrfa'g jnag gb or yrsg va gur qhfg ol Znubeb
Qbrf fur znggre va guvf svtug gb ohea Zvyyfntr gb gur tebhaq
Fb jung unccraf jura Antv abj xabjf gung fur zrnag gb qvfznagyr vg naq ybjxrl nterrf jvgu vg, ohg nyfb qbrfa'g jnag gb or yrsg va gur qhfg ol Znubeb
Qbrf fur znggre va guvf svtug gb ohea Zvyyfntr gb gur tebhaq
v guvax vg jbhyq or #sha naq #fpunqraserhqr vs ubgneh whfg fgnegrq ure bja qvnel va gur fnzr synfu qevir, ohg fur qbrf n onq wbo ng uvqvat vg orsber xvyyvat urefrys fb fbzrbar yvxr znubeb be antv trgf n qbhoyr qbfr bs gur Ubeebef orsber erprvivat gur pnyy nobhg ubgneh'f qrzvfr
September 27, 2026 at 3:47 AM
v guvax vg jbhyq or #sha naq #fpunqraserhqr vs ubgneh whfg fgnegrq ure bja qvnel va gur fnzr synfu qevir, ohg fur qbrf n onq wbo ng uvqvat vg orsber xvyyvat urefrys fb fbzrbar yvxr znubeb be antv trgf n qbhoyr qbfr bs gur Ubeebef orsber erprvivat gur pnyy nobhg ubgneh'f qrzvfr
rot13 just in case Antv vf fb tbbq sbe gur "jung vs fbzrbar sbhaq vg vafgrnq bs Ubgneh" orpnhfr fur jbhyq abg unaqyr vg jryy ng nyy ohg furf n dhvrg fhssrere fb fur'q whfg abg gryy nalbar naq yrg vg rng ure hc vafvqr hagvy fur ernpurf ure yvzvg. vg znxrf zr sreny. guvf znxrf zr sreny
September 27, 2026 at 11:24 PM
rot13 just in case Antv vf fb tbbq sbe gur "jung vs fbzrbar sbhaq vg vafgrnq bs Ubgneh" orpnhfr fur jbhyq abg unaqyr vg jryy ng nyy ohg furf n dhvrg fhssrere fb fur'q whfg abg gryy nalbar naq yrg vg rng ure hc vafvqr hagvy fur ernpurf ure yvzvg. vg znxrf zr sreny. guvf znxrf zr sreny
UPDATE: So far we've identified 639 compromised npm package versions across 323 unique packages in tonight’s Mini Shai-Hulud wave.
That includes 558 versions across 279 unique @antv packages. Most were detected within ~6 minutes of publication.
We also published our technical analysis.
That includes 558 versions across 279 unique @antv packages. Most were detected within ~6 minutes of publication.
We also published our technical analysis.
May 19, 2026 at 4:47 AM
UPDATE: So far we've identified 639 compromised npm package versions across 323 unique packages in tonight’s Mini Shai-Hulud wave.
That includes 558 versions across 279 unique @antv packages. Most were detected within ~6 minutes of publication.
We also published our technical analysis.
That includes 558 versions across 279 unique @antv packages. Most were detected within ~6 minutes of publication.
We also published our technical analysis.
The Microsoft Defender Research team has published an analysis of the Mini Shai-Hulud npm supply chain compromise targeting antv packages, including attack flow, payloads, and impact, along with mitigation, detection, and hunting guidance: msft.it/6013vpQYv
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft | Microsoft Security Blog
Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials acros...
msft.it
May 20, 2026 at 6:14 PM
The Microsoft Defender Research team has published an analysis of the Mini Shai-Hulud npm supply chain compromise targeting antv packages, including attack flow, payloads, and impact, along with mitigation, detection, and hunting guidance: msft.it/6013vpQYv
#avfc www.vidio.com/live/782-antv tomorrows game against the Indonesian all stars can be streamed here as long as you have your VPN set to Indonesia. I'll post other links if I find them. #astonvilla #preseason
Live Streaming ANTV | TV Online (Live 24 Jam)
Streaming ANTV Hari Ini ● Info Jadwal Tayang & Siaran Ulang 7 Hari ● Nonton ANTV HD - Live 24 Jam di Vidio.
www.vidio.com
July 31, 2026 at 12:28 PM
#avfc www.vidio.com/live/782-antv tomorrows game against the Indonesian all stars can be streamed here as long as you have your VPN set to Indonesia. I'll post other links if I find them. #astonvilla #preseason
@andrewnez.bsky.social is it too late to update your PyCon talk? www.stepsecurity.io/blog/actions... / socket.dev/blog/antv-pa...
Active Supply Chain Attack Compromises @antv Packages on npm...
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.
socket.dev
May 19, 2026 at 3:58 AM
@andrewnez.bsky.social is it too late to update your PyCon talk? www.stepsecurity.io/blog/actions... / socket.dev/blog/antv-pa...
