AI AI Red Team Engineering notes, research references, and field notes on AI systems, responsible AI, governance, and compliance.
Microsoft Security Blog ยท May 20, 2026

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft

news AI Red TeamingPrompt InjectionAgent Security
Why it matters

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, and 1Password platforms. The post Mini Shai Hulud: Compromised @antv npm packages

My takeaway: Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, and 1Password platforms. The post Mini Shai Hulud: Compromised @antv npm packages