Shai-Hulud Is Back, and This Time It Ate the Whole Ecosystem

A single compromised npm maintainer account unleashed the Shai-Hulud worm across over 300 AntV ecosystem packages, enabling credential theft, persistent IDE backdoors, and mass supply chain compromise that demands immediate credential rotation, package pinning, and forensic threat hunting.