How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Mini Shai-Hulud Resurfaces; Compromised Maintainer of antv, timeago, and size-sensor Packages Revives Worm Activity

calendar_today May 18, 2026 person domain semgrep

Malicious packages discovered on NPM started with a compromised maintainer account and spread from @antv/*, timeago, size-sensor, and hundreds more.

open_in_new Read original post