Research
Active Supply Chain Attack Compromises @antv Packages on npm
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.
By Socket Research Team - May 19, 2026
🚨 Active Supply Chain Attack:node-ipc Package Compromised.Learn More →
libflitter
Advanced tools
Flitter
Flitter is a quick & ligthweight web app framework based on Express.
You should totally check out the main project here.
Also, the docs here.
What is this package?
The libflitter package provides the core collection of units required to get Flitter off the ground. These units rely on a particular folder structure that is passed to the units. Each unit does one task and only one task. This helps keep Flitter extensible, changeable, and relatively easy to understand.
Who?
Flitter (and libflitter) was (er.. were) created by Garrett Mills, and its use is governed by the terms of the MIT License as specified in the LICENSE file.
Of course, that does mean that Flitter is © 2019 Garrett Mills. ;)
FAQs
Core libraries for Flitter.
We found that libflitter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 23 Apr 2021
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
By Socket Research Team - May 14, 2026
Security News
TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.
By Sarah Gooding - May 14, 2026