Malicious code in @antv/dipper-map (npm)

A threat actor compromised the npm account atool and executed a coordinated supply chain attack campaign called "Mini Shai-Hulud," publishing 631 malicious versions across 314 npm packages in an automated 22-minute burst. The @antv/dipper-map package was among those compromised.\n\nEach malicious version injects a preinstall hook that executes a 498KB obfuscated Bun script. This script exfiltrates sensitive credentials including AWS keys, GitHub PATs, npm tokens, GCP service accounts, Azure credentials, Kubernetes service account tokens, SSH keys, Docker auth configs, database connection strings, Stripe keys, and Slack tokens. The stolen data is transmitted via the GitHub API to attacker-controlled repositories following Dune-themed naming patterns (e.g., harkonnen-melange-742).\n\nBeyond credential theft, the malicious packages establish persistence through multiple mechanisms: CI/CD workflow injection (a GitHub Actions workflow named Run Copilot that dumps all secrets via toJSON(secrets)), AI agent session hooks, and a system daemon named kitty-monitor. This multi-layered persistence approach suggests intent for long-term access and continued data exfiltration.\n\nThe incident was identified by both Amazon Inspector and Google Open Source Security sources, confirming the presence of malicious code in the affected package."