The Mini Shai-Hulud npm worm compromised 314 packages in the AntV ecosystem on May 19, 2026 — including echarts-for-react and timeago.js.
Mini Shai-Hulud npm Attack: AntV Ecosystem Compromise (May 2026)
calendar_today
May 19, 2026
domain
chainguard