Campaign-specific starting point
Emergency policy for Mini Shai-Hulud @antv npm worm wave
This is a conservative starting point selected from the reviewed public recipe registry based on the campaign’s first reviewed artifact class. It is not automatically applied.
Selected recipe
Block known-malicious package installs
Block supported install actions for packages already classified as malicious.
Matcher: package = malicious-package. Decision: block.
Review the actual artifact identifiers, affected environment, coverage, and campaign evidence before rollout. The recipe does not claim Guard covers every stage of the campaign.