thehackernews.com·May 19, 2026
Cybersecurity researchers have identified a new software supply chain attack targeting npm packages in the @antv ecosystem, particularly affecting the atool maintainer account and popular packages like echarts-for-react, which has around 1.1 million weekly downloads.
This fresh software supply chain attack targeting npm packages in the @antv ecosystem, particularly affecting the "echarts-for-react" package with 1.1 million weekly downloads, underscores the critical need for robust supply chain security measures. As a professional in cybersecurity, ensure that your organization's development and security teams implement stringent monitoring and validation processes for third-party packages to mitigate such threats effectively.