
The digital peace of a standard weekend was abruptly dismantled when an automated wave of malicious code swept through the world’s most popular JavaScript package registry with clinical precision. On May 19, the AntV data visualization ecosystem became the focal point of a sophisticated supply chain attack that deployed 639 malicious package versions in a single hour. This was not










