Endor Labs detected 42 malicious npm packages forging valid Sigstore provenance. If you installed affected packages May 19, rotate all credentials now.
Mini Shai-Hulud Returns: 42 Malicious npm Packages Fake Sigstore Badges in AntV Ecosystem Attack | Blog | Endor Labs
calendar_today
May 19, 2026
domain
endor-labs