Malicious code in @antv/g-plugin-webgl-renderer (npm)

A threat actor compromised the npm account atool and executed a coordinated supply chain attack campaign dubbed "Mini Shai-Hulud," publishing 631 malicious versions across 314 npm packages in an automated 22-minute burst. The @antv/g-plugin-webgl-renderer package was among those compromised.\n\nEach malicious version injects a preinstall hook that executes a 498KB obfuscated Bun script. The script exfiltrates sensitive credentials including AWS keys, GitHub PATs, npm tokens, GCP service accounts, Azure credentials, Kubernetes service account tokens, SSH keys, Docker authentication configs, database connection strings, Stripe keys, and Slack tokens. Exfiltration occurs via the GitHub API, with stolen data committed to attacker-controlled repositories following Dune-themed naming patterns (e.g., harkonnen-melange-742).\n\nThe attack establishes multiple persistence mechanisms: CI/CD workflow injection via a GitHub Actions workflow named Run Copilot that dumps all secrets using toJSON(secrets), AI agent session hooks, and a system daemon named kitty-monitor. This multi-layered approach ensures continued access and data exfiltration even after the initial malicious package versions are removed.\n\nThe incident was detected by Amazon Inspector and Google Open Source Security, confirming the presence of malicious code in the affected packages."