discovered
has-ansi is identified in the SafeDep analysis "npm Supply Chain Attack: Multiple Popular Packages Hijacked (1B+ Weekly Downloads)". Complete analysis of sophisticated crypto wallet drainer found in 21 npm packages with over one billion weekly downloads. Includes detailed technical breakdown of 76KB malware payload disguised in has-ansi@6.0.1 and multi-stage attack architecture.