Reviewed threat campaign
Mini Shai-Hulud @antv npm worm wave
Aikido documented a May 2026 Mini Shai-Hulud wave compromising packages in the @antv ecosystem and other npm projects, stealing credentials and planting persistence in VS Code and Claude Code configuration.
Uncertainty
This page covers the reviewed May 19 wave, not every earlier or later Mini Shai-Hulud incident. Counts of packages, repositories, and affected credentials can change as investigations progress.
Limitations
- Removing a dependency alone is insufficient when persistence or credentials may already have been modified; follow the incident source and rotate exposed secrets.
Timeline
- · Mini Shai-Hulud @antv npm worm wave was first observed in the reviewed source material.
- · The reviewed source published or updated its defensive analysis and remediation guidance.
Publication clock: 1979.5 hours from reviewed disclosure timestamp to HOL publication; 12-hour critical target; historical backfill outside target.
Guard coverage and non-coverage
- partial: coverage:stable:codex — Eligible dependency-install actions can be policy-controlled, but stolen publishing credentials and already-executed worm propagation require registry and endpoint remediation.
- partial: coverage:stable:claude-code — Claude Code is a supported harness, but Guard does not claim that every out-of-band modification to Claude configuration is automatically intercepted.
Defensive policy guidance
- Require review or explicit approval for new or changed dependency installation before an eligible package-manager action executes.
Status: available. Coverage depends on the active Guard release, package manager, harness event surface, and local policy. It is not a guarantee that every dependency path is intercepted. - Review unexpected changes to agent and editor instruction/configuration files before relying on the affected workspace.
Status: available. Current Guard coverage is harness- and event-specific. Configuration changes made outside an observed surface may require separate repository or endpoint controls.
Sources
- Aikido: Mini Shai-Hulud @antv wave · observed 2026-08-09