AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks
According to analysis by SafeDep, the account in question, atool (i@hust.cc), which publishes the timeago.js JavaScript library, had rights to a large catalog of packages,…