{"id":4906,"date":"2026-05-19T14:51:35","date_gmt":"2026-05-19T14:51:35","guid":{"rendered":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/"},"modified":"2026-05-19T14:51:35","modified_gmt":"2026-05-19T14:51:35","slug":"atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na","status":"publish","type":"post","link":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/","title":{"rendered":"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na"},"content":{"rendered":"

Ang kampanyang Mini Shai-Hulud sa npm ay sumisira sa mga pakete ng @antv, na nagta-target ng mga GitHub token, AWS key, at CI\/CD secrets ng mga blockchain developer sa isang koordinadong pag-atake sa supply chain.<\/strong><\/em><\/p>\r\n\r\n

Ang mga malisyosong publikasyon ay nagsimula ilang sandali bago ang 2 a.m. UTC noong Mayo 19. Sa oras na maraming developer sa East Coast ang nagkaroon ng kanilang unang kape, tapos na ang pinsala.<\/p>\r\n\r\n\r\n\r\n

Sinusubaybayan ng Socket’s Threat Research team ang isang aktibong pag-atake sa supply chain ng npm<\/a> na sumisira sa mga pakete sa buong antv visualization suite. Ang apektadong npm maintainer account, atool, ay kumokontrol sa malawak na hanay ng mga data visualization at graphing package na ginagamit nang husto sa blockchain developer tooling. Kabilang sa mga na-flag na package: antv\/g2, antv\/g6, antv\/x6, antv\/l7, antv\/s2, antv\/f2, at mga kaugnay na tool sa labas ng antv namespace kabilang ang timeago.js, size-sensor, at canvas-nest.js.<\/p>\r\n\r\n\r\n\r\n

Ang echarts-for-react ay nasa sentro ng pagkakalantad. Ang package na ito ay humihila ng humigit-kumulang 1.1 milyong lingguhang pag-download. Na-flag ng Socket ang isang malisyosong bersyon, 3.2.7, bilang kilalang malware, kung saan ang naka-compromise na artifact ay na-publish 19 minuto bago ang pagtuklas ayon sa sariling data ng package registry ng Socket.<\/p>\r\n\r\n\r\n\r\n

639 Bersyon. Isang Gabi. Nagbibilang Pa.<\/strong><\/h2>\r\n\r\n\r\n\r\n

Ang window ng aktibidad ay masikip. Nagsimula ang mga malisyosong publikasyon bandang 01:56 UTC at huminto nang humigit-kumulang 02:56 UTC. Karamihan dito ay nahuli ng mga detection system ng Socket sa loob ng anim hanggang labindalawang minuto pagkatapos ng publikasyon. Ang median detection time ay humigit-kumulang 6.7 minuto, ayon sa internal review ng kompanya na nai-post sa socket.dev<\/a>.<\/p>\r\n\r\n\r\n\r\n

Sa buong kampanyang Mini Shai-Hulud, nasubaybayan na ng Socket ang 1,055 na naka-compromise na bersyon sa 502 na natatanging package. Sumasaklaw ang kampanya sa npm, PyPI, at Composer. Ang npm ay halos lahat: 1,048 na bersyon sa 498 na natatanging package, kung saan ang PyPI at Composer ay nag-ambag lamang ng ilan.<\/p>\r\n\r\n\r\n\r\n

Ang mga apektadong package noong gabing iyon ay kasama rin ang mga namespace sa labas ng antv. Ang mga package sa ilalim ng lint-md, openclaw-cn, at starmind ay nakatanggap ng mga malisyosong update sa parehong wave. Ang CSV data na sinuri ng reporter na ito ay nagpapakita ng mga package tulad ng antv\/x6 bersyon 3.2.7 at 3.3.7, antv\/g2 bersyon 5.5.8 at 5.6.8, antv\/g6, antv\/g2plot, antv\/s2, at dose-dosenang iba pa, lahat ay na-publish sa loob ng parehong isang oras na window.<\/p>\r\n\r\n\r\n\r\n

\"\"<\/figure>\r\n\r\n\r\n\r\n

Pinagmulan:socket.dev<\/a>.<\/p>\r\n\r\n\r\n\r\n

Ano Talaga ang Ginagawa ng Payload<\/strong><\/h2>\r\n\r\n\r\n\r\n

Ang injected code ay hindi banayad tungkol sa mga layunin nito. Binabago ng root-level index.js file ang package.json upang patakbuhin ang sarili nito sa oras ng pag-install sa pamamagitan ng preinstall hook: bun run index.js.<\/p>\r\n\r\n\r\n\r\n

Malalim ang mga layer ng string obfuscation. Gumagamit ang payload ng malaking lookup table, runtime string decoding, at isang custom decryptor na naka-register sa globalThis bilang fc2edea72. Ang pag-decode nito ay nagpapakita ng exfiltration endpoint: https:\/\/t[.]m-kosche[.]com:443\/api\/public\/otel\/v1\/traces<\/a>. Ang nakolektang data ay pinipiga gamit ang gzip, naka-encrypt gamit ang AES-256-GCM, at ang AES key mismo ay binalot sa RSA-OAEP na may SHA-256 bago ipadala. Hindi diretso ang pag-intercept ng trapikong iyon mula sa network telemetry.<\/p>\r\n\r\n\r\n\r\n

Ang payload ay partikular na naghahanap ng mga developer environment secrets. Lumilitaw sa target list ang mga GitHub token, npm token, AWS credentials, Kubernetes service account materials, Vault token, SSH private keys, Docker authentication files, at database connection strings. Naglalaman din ito ng explicit logic para sa 19 na CI\/CD platforms, kabilang ang GitHub Actions, GitLab CI, CircleCI, Jenkins, Azure DevOps, AWS CodeBuild, Buildkite, Vercel, at Netlify.<\/p>\r\n\r\n\r\n\r\n

Ang listahang iyan ay parang shopping cart. Hindi isang surveillance tool.<\/p>\r\n\r\n\r\n\r\n

GitHub Repositories, Dune Names, at isang Worm na May Ambisyon<\/strong><\/h2>\r\n\r\n\r\n\r\n

Mayroong GitHub fallback exfiltration path para sa mga kaso kung saan naka-block ang primary HTTPS endpoint. Kung makakuha ang payload ng isang magagamit na GitHub token, gumagawa ito ng repository sa ilalim ng account ng biktima at ini-commit ang ninakaw na data sa isang results\/ directory. Ang mga file name ay sumusunod sa pattern na results-timestamp-counter.json. Dating na-dokumento ng Socket ang pag-uugaling ito sa mga naunang Mini Shai-Hulud wave.<\/p>\r\n\r\n\r\n\r\n

Ang pampublikong GitHub search results para sa reversed marker phrase ay kasalukuyang nagpapakita ng humigit-kumulang 1.8k repositories, batay sa mga screenshot na sinuri mula sa ulat ng Socket. Ang mga pangalan ng repository ay sumusunod sa mga pattern na tema ng Dune: sayyadina-stillsuit-852, atreides-ornithopter-112, harkonnen-phibian-552. Ang isang naobserbahang repository, Zaynex\/sayyadina-stillsuit-852, ay naglalaman ng results\/ directory na naaayon sa aktibong exfiltration.<\/p>\r\n\r\n\r\n\r\n

Mayroon ding built-in na worm logic. Pinapatunayan ng package ang mga npm token sa pamamagitan ng registry APIs, binibilang ang mga maintainable package, ini-inject ang preinstall hook, itinataas ang mga bersyon, pagkatapos ay muling nag-publish sa ilalim ng identity ng naka-compromise na maintainer. Idinisenyo para kumalat, hindi lang magnakaw.<\/p>\r\n\r\n\r\n\r\n

Ang mga naunang variant ng Mini Shai-Hulud ay tumama sa mga TanStack package at mga tool na may kaugnayan sa Intercom. Iba’t ibang file name, iba’t ibang C2 endpoint. Ang wave na ito ay gumagamit ng root-level index.js at mas maliit na payload body. Ang core behavior ay pareho sa mga variant. Itinuturing ito ng Socket bilang parehong pamilya ng kampanya.<\/p>\r\n\r\n\r\n\r\n

Ang banta ay hindi teoretikal para sa crypto infrastructure<\/a>. Ang mga blockchain developer na gumagawa ng DeFi tooling o Web3 dashboard ay madalas na gumagamit ng antv charting libraries para sa on-chain data visualization. Ang isang naka-compromise na CI\/CD pipeline sa isang DeFi project ay maaaring maglantad ng deployer credentials o protocol admin access. Sinabi ng Socket na nananatiling bukas ang imbestigasyon.<\/p>\r\n","protected":false},"excerpt":{"rendered":"

Ang kampanyang Mini Shai-Hulud sa npm ay sumisira sa mga pakete ng @antv, na nagta-target ng mga GitHub token, AWS key, at CI\/CD secrets ng mga blockchain developer sa isang koordinadong pag-atake sa supply chain. Ang mga malisyosong publikasyon ay nagsimula ilang sandali bago ang 2 a.m. UTC noong Mayo 19. Sa oras na maraming […]<\/p>\n","protected":false},"author":7,"featured_media":4905,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[128],"tags":[],"class_list":["post-4906","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-crypto-scams"],"acf":[],"yoast_head":"\nAtake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na - Philippines Live Bitcoin News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na - Philippines Live Bitcoin News\" \/>\n<meta property=\"og:description\" content=\"Ang kampanyang Mini Shai-Hulud sa npm ay sumisira sa mga pakete ng @antv, na nagta-target ng mga GitHub token, AWS key, at CI\/CD secrets ng mga blockchain developer sa isang koordinadong pag-atake sa supply chain. Ang mga malisyosong publikasyon ay nagsimula ilang sandali bago ang 2 a.m. UTC noong Mayo 19. Sa oras na maraming […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/\" \/>\n<meta property=\"og:site_name\" content=\"Philippines Live Bitcoin News\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-19T14:51:35+00:00\" \/>\n<meta name=\"author\" content=\"filipino2lbn\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"filipino2lbn\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/\"},\"author\":{\"name\":\"filipino2lbn\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/#\\\/schema\\\/person\\\/8dfcd5a217bd306eaf2eaca53d9d573b\"},\"headline\":\"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na\",\"datePublished\":\"2026-05-19T14:51:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/\"},\"wordCount\":941,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2026\\\/05\\\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp\",\"articleSection\":[\"Crypto Scams\"],\"inLanguage\":\"tl\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/\",\"url\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/\",\"name\":\"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na - Philippines Live Bitcoin News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2026\\\/05\\\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp\",\"datePublished\":\"2026-05-19T14:51:35+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/#\\\/schema\\\/person\\\/8dfcd5a217bd306eaf2eaca53d9d573b\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#breadcrumb\"},\"inLanguage\":\"tl\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tl\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#primaryimage\",\"url\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2026\\\/05\\\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp\",\"contentUrl\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2026\\\/05\\\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp\",\"width\":200,\"height\":200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/2026\\\/05\\\/19\\\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/#website\",\"url\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/\",\"name\":\"Philippines Live Bitcoin News\",\"description\":\"Ang Live Bitcoin News ay ang source para sa pinakabagong balita sa Ethereum, XRP, DeFi, Web 3.0, crypto trends, market analysis, blockchain, at global financial updates, 24 na oras sa isang araw, 7 araw sa isang linggo.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tl\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/#\\\/schema\\\/person\\\/8dfcd5a217bd306eaf2eaca53d9d573b\",\"name\":\"filipino2lbn\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tl\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e64954bb2e27b253baa77841b78e3d1f52ad24cd705f844b3978d2f2e446305?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e64954bb2e27b253baa77841b78e3d1f52ad24cd705f844b3978d2f2e446305?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e64954bb2e27b253baa77841b78e3d1f52ad24cd705f844b3978d2f2e446305?s=96&d=mm&r=g\",\"caption\":\"filipino2lbn\"},\"url\":\"https:\\\/\\\/global.livebitcoinnews.com\\\/ph\\\/author\\\/filipino2lbn\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na - Philippines Live Bitcoin News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/","og_locale":"en_US","og_type":"article","og_title":"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na - Philippines Live Bitcoin News","og_description":"Ang kampanyang Mini Shai-Hulud sa npm ay sumisira sa mga pakete ng @antv, na nagta-target ng mga GitHub token, AWS key, at CI\/CD secrets ng mga blockchain developer sa isang koordinadong pag-atake sa supply chain. Ang mga malisyosong publikasyon ay nagsimula ilang sandali bago ang 2 a.m. UTC noong Mayo 19. Sa oras na maraming […]","og_url":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/","og_site_name":"Philippines Live Bitcoin News","article_published_time":"2026-05-19T14:51:35+00:00","author":"filipino2lbn","twitter_card":"summary_large_image","twitter_misc":{"Written by":"filipino2lbn","Est. reading time":"5 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#article","isPartOf":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/"},"author":{"name":"filipino2lbn","@id":"https:\/\/global.livebitcoinnews.com\/ph\/#\/schema\/person\/8dfcd5a217bd306eaf2eaca53d9d573b"},"headline":"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na","datePublished":"2026-05-19T14:51:35+00:00","mainEntityOfPage":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/"},"wordCount":941,"commentCount":0,"image":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#primaryimage"},"thumbnailUrl":"https:\/\/global.livebitcoinnews.com\/ph\/wp-content\/uploads\/sites\/3\/2026\/05\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp","articleSection":["Crypto Scams"],"inLanguage":"tl","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/","url":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/","name":"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na - Philippines Live Bitcoin News","isPartOf":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/#website"},"primaryImageOfPage":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#primaryimage"},"image":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#primaryimage"},"thumbnailUrl":"https:\/\/global.livebitcoinnews.com\/ph\/wp-content\/uploads\/sites\/3\/2026\/05\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp","datePublished":"2026-05-19T14:51:35+00:00","author":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/#\/schema\/person\/8dfcd5a217bd306eaf2eaca53d9d573b"},"breadcrumb":{"@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#breadcrumb"},"inLanguage":"tl","potentialAction":[{"@type":"ReadAction","target":["https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/"]}]},{"@type":"ImageObject","inLanguage":"tl","@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#primaryimage","url":"https:\/\/global.livebitcoinnews.com\/ph\/wp-content\/uploads\/sites\/3\/2026\/05\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp","contentUrl":"https:\/\/global.livebitcoinnews.com\/ph\/wp-content\/uploads\/sites\/3\/2026\/05\/Binance-Warns-of-North-Korean-Attacks-Using-Fake-Interviews-600x343-1-200x200-1-1-1.webp","width":200,"height":200},{"@type":"BreadcrumbList","@id":"https:\/\/global.livebitcoinnews.com\/ph\/2026\/05\/19\/atake-sa-supply-chain-ng-npm-ay-tumama-sa-antv-mga-lihim-ng-blockchain-dev-ay-nabunyag-na\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/global.livebitcoinnews.com\/ph\/"},{"@type":"ListItem","position":2,"name":"Atake sa Supply Chain ng npm ay Tumama sa @antv: Mga Lihim ng Blockchain Dev ay Nabunyag Na"}]},{"@type":"WebSite","@id":"https:\/\/global.livebitcoinnews.com\/ph\/#website","url":"https:\/\/global.livebitcoinnews.com\/ph\/","name":"Philippines Live Bitcoin News","description":"Ang Live Bitcoin News ay ang source para sa pinakabagong balita sa Ethereum, XRP, DeFi, Web 3.0, crypto trends, market analysis, blockchain, at global financial updates, 24 na oras sa isang araw, 7 araw sa isang linggo.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/global.livebitcoinnews.com\/ph\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tl"},{"@type":"Person","@id":"https:\/\/global.livebitcoinnews.com\/ph\/#\/schema\/person\/8dfcd5a217bd306eaf2eaca53d9d573b","name":"filipino2lbn","image":{"@type":"ImageObject","inLanguage":"tl","@id":"https:\/\/secure.gravatar.com\/avatar\/5e64954bb2e27b253baa77841b78e3d1f52ad24cd705f844b3978d2f2e446305?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5e64954bb2e27b253baa77841b78e3d1f52ad24cd705f844b3978d2f2e446305?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5e64954bb2e27b253baa77841b78e3d1f52ad24cd705f844b3978d2f2e446305?s=96&d=mm&r=g","caption":"filipino2lbn"},"url":"https:\/\/global.livebitcoinnews.com\/ph\/author\/filipino2lbn\/"}]}},"_links":{"self":[{"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/posts\/4906","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/comments?post=4906"}],"version-history":[{"count":0,"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/posts\/4906\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/media\/4905"}],"wp:attachment":[{"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/media?parent=4906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/categories?post=4906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/global.livebitcoinnews.com\/ph\/wp-json\/wp\/v2\/tags?post=4906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}