Malicious npm packages abuse dependency confusion to profile developer environments

Microsoft Threat Intelligence documented a series of supply‑chain attacks in May 2026 that abused npm package discovery (including dependency confusion and typosquatting) to profile developer and build environments and steal CI/CD and cloud credentials. One campaign deployed 33 malicious npm packages that executed during npm install to collect reconnaissance from developer and automation systems; related reports describe compromised @antv packages and the “Mini Shai‑Hulud” payload that exfiltrates secrets from GitHub, AWS, Kubernetes, Vault, npm, and 1Password. Microsoft’s posts include attack