// 토큰 유형
GitHub App Token 유출
GitHub App Token이(가) 노출된 인덱싱 사고. 공개 일자 기준 정렬.
2건 인덱싱됨
- ·CRITICAL9.4·confirmed
AntV npm Account Compromise: Mini Shai-Hulud Wave Hits 323 Packages (May 2026)
On 2026-05-19 the @antv npm publisher session was used to ship 639 malicious versions across 323 packages, the Mini Shai-Hulud campaign now totals 1,055 versions across 502 packages.
벡터 / npm supply chain플랫폼 / npm, GitHub, AWS, +2분량 / 22분 - ·CRITICAL9.5·confirmed
Mini Shai-Hulud npm Worm: TanStack, UiPath, Mistral AI and 169 Packages Compromised (May 2026)
npm worm hit 373 versions across 169 packages (@tanstack, @squawk, @uipath, mistralai) via trusted-publishing OIDC abuse and a prepare-script git dep that exfiltrates cloud and registry secrets at install.
벡터 / npm supply chain플랫폼 / npm, GitHub, AWS분량 / 10분