Malicious code in @antv/g6-element (npm)

Overview\n\nThe npm account 'atool' was compromised as part of the "Mini Shai-Hulud" supply chain attack campaign. The attacker published 631 malicious versions across 314 npm packages in an automated 22-minute burst, including @antv/g6-element. Each malicious version contains a preinstall hook that executes a 498KB obfuscated Bun script.\n\n## Attack Mechanism\n\nThe injected preinstall hook executes obfuscated code that exfiltrates sensitive credentials via the GitHub API as a covert channel. Stolen data includes AWS keys, GitHub PATs, npm tokens, GCP service accounts, Azure credentials, Kubernetes service account tokens, SSH keys, Docker auth configs, database connection strings, Stripe keys, and Slack tokens. Credentials are committed to attacker-controlled repositories following Dune-themed naming patterns (e.g., harkonnen-melange-742).\n\n## Persistence Mechanisms\n\nBeyond the initial preinstall hook, the attack establishes persistence through multiple vectors: CI/CD workflow injection (a GitHub Actions workflow named Run Copilot that dumps all secrets via toJSON(secrets)), AI agent session hooks, and a system daemon named kitty-monitor.\n\n## Detection\n\nThe malicious package was identified by Amazon Inspector and Google Open Source Security scanning."