Malicious code in @antv/stat (npm)

The npm account atool was compromised and weaponized to publish 631 malicious versions across 314 npm packages in an automated 22-minute burst, part of the "Mini Shai-Hulud" supply chain attack campaign attributed to the TeamPCP threat actor. The @antv/stat package was among those compromised.\n\nEach malicious version injects a preinstall hook that executes a 498KB obfuscated Bun script. The script exfiltrates sensitive credentials—including AWS keys, GitHub PATs, npm tokens, GCP service accounts, Azure credentials, Kubernetes service account tokens, SSH keys, Docker auth configs, database connection strings, Stripe keys, and Slack tokens—using the GitHub API as a covert exfiltration channel. Stolen credentials are committed to attacker-controlled repositories following Dune-themed naming patterns (e.g., harkonnen-melange-742).\n\nThe attack establishes persistence through multiple mechanisms: CI/CD workflow injection (a GitHub Actions workflow named Run Copilot that dumps all secrets via toJSON(secrets)), AI agent session hooks, and a system daemon named kitty-monitor. This represents a sophisticated, multi-vector supply chain compromise with broad impact across development and production environments.\n\nThe incident was detected by Amazon Inspector and Google Open Source Security, confirming the malicious nature of the compromised packages."