people · May 22, 2026

Snyk Blog Details AntV Supply Chain Campaign Expansion with Microsoft durabletask PyPI Package Compromise

Snyk published on May 19, 2026, details on the expansion of its AntV Supply Chain Campaign following the compromise of Microsoft's `durabletask` PyPI package. The post covers ongoing supply chain threats including the Mini Shai-Hulud campaign that previously hit TanStack npm packages on May 11, 2026, with over 84 malicious versions across 42 packages. Snyk, alongside Trend Micro and StepSecurity, has tracked the TeamPCP threat actor (UNC6780) across at least seven waves of the worm since March 2026, including Trivy, Bitwarden CLI, and Mistral AI packages.