The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised
2026-05-20T08:52:02Z•4f45bd2e574d177a9a4c5a0f46eb9a8ebda9d3a126910f39f0a017798c4cb216
antvcache-poisoningcompromised-maintainercredential-stealerdurabletaskgithub-actionslightningmalicious-packagemini-shai-huludnode-ipcnpmoidc-token-exfiltrationpwn-requestpypislsasoftware-supply-chainsupply-chaintanstack
What happened
A coordinated supply-chain campaign dubbed "Mini Shai-Hulud" has compromised numerous npm and PyPI packages in May 2026 by abusing compromised maintainer accounts and CI/CD workflows. Notable impacts include 300+ malicious versions published across AntV npm packages, 84 compromised @tanstack/* artifacts (via a GitHub Actions "Pwn Request", cache poisoning, and OIDC token extraction from runner memory), multiple malicious node-ipc releases, a Bun-based credential-stealer in the lightning PyPI package, and a suspected compromise of the Microsoft-associated durabletask PyPI package. Maliciousesce
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- snyk_blog
- Record identifier
- 4f45bd2e574d177a9a4c5a0f46eb9a8ebda9d3a126910f39f0a017798c4cb216
- Enrichment time
- 2026-05-20T08:52:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.