• Platform
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - ai
    Mend AI Secure AI powered applications
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - icon mend ai native appsec platform
    Mend AppSec Secure your code
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - sca
    Mend SCA Decrease open source risk
    Mend sast icon
    Mend SAST Secure proprietary code 10x faster
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - renovate
    Mend Renovate Automate dependency updates
    Expand AppSec coverage
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - dast icon 1 DAST Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - apis icon 1 API security Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - eol icon EOL support
    Platform Benefits
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - repoi icon Repo integration Scalability-icon Scalability Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - reachability icon Reachability
  • Solutions
    Ai models risk - nav bar icon
    AI app security Manage risks in AI models and agents
    Ai-red-teaming-icon-
    AI red teaming Test and secure conversational AI
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - ai based remediation icon
    AI based remediation workflows Automate remediation with AI
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account -
    System prompt hardening Prevent prompt injection and misuse
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - ai
    AI-BOM AI component inventory
    Sbom - nav bar icon
    SBOM Move from static to effective SBOMs
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - ai gen code security nav bar icon 36x36 1
    AI gen code security Real-time AI code security
    Runtime-security-nav-bar-icon
    Dynamic testing Test for risks in running applications
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - compliance nav bar icon 36x36 3
    Compliance Security compliance coverage
    Code scanning - nav bar icon
    Code scanning Find and fix known vulnerabilities
    Open source license nav bar icon
    Open source security Prevent. Prioritize. Automate.
    Open source license - nav bar icon
    Open source compliance Risk management for OSS licenses
    Dependency updates - nav bar icon
    Dependency updates Reduced risk, better code
    Software supply chain - nav bar icon
    Software supply chain security Ensure build integrity
    Container security container security
    Container security Container security, simplified
  • Why Mend
  • Company
    About us - nav bar icon
    About us Who we are
    Careers nav bar icon
    Careers Join our team
    Partners - nav bar icon
    Partners Meet our partners
    Events - nav bar icon
    Events Upcoming events
    Newsroom - nav bar icon
    Newsroom The latest Mend.io news
    Contact-us nav bar icon
    Contact us Connect with us
  • Resources
    Resource center - nav bar icon
    Resource center View our latest resources
    Blog - nav bar icon
    Blog The latest AppSec news and insights
    Podcast-icon
    Podcast Insights from leading experts
    Customers - nav bar icon
    Customers View our customer case studies
    Integrations - nav bar icon
    Integrations Find your integration
    Langugages nav bar icon
    Languages Find your language
    Vulnerability database - nav bar icon
    Vulnerability database Mend.io's OSS vulnerability database
    Documentation - nav bar icon
    Documentation Product and feature documentation
    FEATURED
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - ai security governance guide feature image
    AI Security Governance: A Practical Framework for Security and Development Teams
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - the complete guide to open source ai licensing 2026 1000x650
    The Complete Guide to Open Source & AI Licensing 2026
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - roi whitepaper featured image
    ROI of Automated Dependency Management with Mend Renovate Enterprise
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - red teaming guide featured image
    AI Red Teaming Practical Guide
    Mini shai-hulud hits @antv: 323 npm packages compromised through the atool maintainer account - icon guides

    Guides

    AI security

    Protect AI models, data, and systems

     AI red teaming

    Test for behavioral risks in conversational AI

     LLM security

    Mitigating risks and future trends

     Application security

    AppSec types, tools, and best practices

     Dependency management

    Automating dependency updates

     SCA

    Manage open source code

     SAST

    Keep source code safe

     Software bill of materials

    Improve transparency, security, and compliance

     Application security testing

    Pre-production scanning and runtime protection

     Container security

    Secure containerized applications
    See all guides
Schedule a Demo
Blog Alina Podoba

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account - alina podoba
Alina Podoba Security Research Analyst

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account - Mini Shai Hulud is Back 1

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Alina Podoba May 19, 2026
Malicious Packages

Mini Shai-Hulud strikes again: 323 npm packages compromised via @antv's atool.

Read More

Subscribe to our Newsletter

Join our subscriber list to get the latest news and updates

Thanks for signing up!