Malicious code in @antstackio/eslint-config-antstack (npm)
The npm package @antstackio/eslint-config-antstack was compromised and contained malicious code as part of the Sha1-Hulud: The Second Coming NPM worm. The malicious payload steals tokens and credentials, publishes them to GitHub, propagates itself to other NPM packages owned by the user, and may destroy the user's home directory.
- Disclosed
- Last updated
- Blast radius
- All users who installed affected versions of @antstackio/eslint-config-antstack
- Ecosystems
- Attack vectors
- Threat actor
- Affected entities
- @antstackio/eslint-config-antstack
The npm package @antstackio/eslint-config-antstack was found to contain malicious code, as reported by both Amazon Inspector and Google Open Source Security.
The package was compromised by the Sha1-Hulud: The Second Coming NPM worm. The malicious payload performs multiple harmful actions: it steals tokens and credentials and publishes them to GitHub, propagates itself to NPM packages owned by the affected user, and establishes persistence through a GitHub action. The worm may also destroy the user's home directory.
This incident was identified and credited to the OpenSSF's malicious-packages repository, which tracks confirmed malicious packages in open-source ecosystems.
Indicators of compromise
- Packages
- @antstackio/eslint-config-antstack
Remediation
- Immediately remove or uninstall @antstackio/eslint-config-antstack from all systems and projects
- Rotate all tokens, credentials, and secrets that may have been exposed
- Audit GitHub repositories and actions for unauthorized changes or persistence mechanisms
- Review GitHub commit history and action logs for suspicious activity
- Check for unauthorized NPM package publications or modifications to packages you own
- Scan systems for signs of home directory destruction or other malicious activity
- Monitor for any unauthorized access to accounts or systems that had this package installed
Sources
- GitHub Advisory GHSA-xqmj-xphj-x7h3 · GitHub Advisory Database
Cite this entry
"Malicious code in @antstackio/eslint-config-antstack (npm)." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed July 26, 2026; last updated July 26, 2026. https://supplychainattack.org/incident/malicious-code-in-antstackio-eslint-config-antstack-npm-1kx6ge
Suggest a correction
Found an error or have a newer source? Corrections to factual errors take priority over new entries.
Related incidents
- containedcritical
Malicious code in @antv/f-wx (npm)
The npm account `atool` was compromised and used to publish 631 malicious versions across 314 packages, including @antv/f-wx. Each version injects a preinstall hook executing an obfuscated Bun script that exfiltrates credentials via the GitHub API and establishes persistence through CI/CD workflow injection and system daemons.
Mini Shai HuludTeamPCPnpmOtherAccount takeoverCompromised packageMalicious commit - containedcritical
Malicious code in @antv/g-web-components (npm)
A threat actor compromised the npm account 'atool' and published 631 malicious versions across 314 npm packages in a 22-minute automated burst, including @antv/g-web-components. Each malicious version injects a preinstall hook executing an obfuscated Bun script that exfiltrates credentials and establishes persistence via CI/CD workflow injection and system daemons.
Mini Shai HuludnpmOtherAccount takeoverCompromised packageMalicious commit - containedcritical
Malicious code in @antv/dipper-hooks (npm)
The npm account `atool` was compromised and used to publish 631 malicious versions across 314 npm packages, including @antv/dipper-hooks, in an automated 22-minute burst. Each malicious version injects a preinstall hook executing an obfuscated Bun script that exfiltrates credentials (AWS keys, GitHub PATs, npm tokens, GCP service accounts, Azure credentials, Kubernetes tokens, SSH keys, Docker configs, database strings, Stripe keys, Slack tokens) via the GitHub API and establishes persistence through CI/CD workflow injection and system daemons.
Mini Shai HuludnpmOtherAccount takeoverCompromised packageMalicious commit - containedcritical
Malicious code in @antstackio/shelbysam (npm)
The npm package @antstackio/shelbysam was compromised and contained malicious code associated with the Sha1-Hulud: The Second Coming NPM worm. The malicious payload steals tokens and credentials, publishes them to GitHub, propagates to other NPM packages owned by the user, and may destroy the user's home directory.
Shai-HuludnpmCompromised packageMalicious commit