Malicious code in @antv/g6-mobile (npm)

A threat actor compromised the npm account atool and executed a coordinated supply chain attack known as "Mini Shai-Hulud," publishing 631 malicious versions across 314 npm packages in an automated 22-minute burst. The @antv/g6-mobile package was among those compromised.\n\nEach malicious version injects a preinstall hook that executes a 498KB obfuscated Bun script. This script exfiltrates sensitive credentials including AWS keys, GitHub PATs, npm tokens, GCP service accounts, Azure credentials, Kubernetes service account tokens, SSH keys, Docker auth configs, database connection strings, Stripe keys, and Slack tokens. The stolen data is transmitted via the GitHub API to attacker-controlled repositories following Dune-themed naming patterns (e.g., harkonnen-melange-742).\n\nBeyond credential theft, the malicious code establishes persistence through multiple mechanisms: CI/CD workflow injection (a GitHub Actions workflow named Run Copilot that dumps all secrets via toJSON(secrets)), AI agent session hooks, and a system daemon named kitty-monitor. This multi-layered persistence strategy suggests intent for long-term access and continued data exfiltration.\n\nThe incident was identified by multiple security sources including Amazon Inspector and Google Open Source Security, confirming the authenticity and scope of the compromise."