🎯 Maintainer account compromise

The items that name it 4

• Evolution of Web3 in Cloud Supply Chain Attacks
  article2026-10-07

  Used in the Axios compromise to inject plain-crypto-js into the package manifest.

• Rust Supply-Chain Attack: arrayref, internment, and append-only-vec Poisoned by the proc-macro1 Build-Time Dropper
  writeup2026-08-22

  Attacker compromised the droundy crates.io maintainer account (likely via a long-lived API token or stolen session) and used it to publish poisoned releases of three crates

• Thinkst Package Proxy
  tool2026-06-26

  Attackers compromising maintainer accounts, often directly uploading packages instead of using the normal pipeline

• Shai-Hulud-2.0-Detector — npm supply-chain compromise scanner
  repo

  ChainDrop wave began by compromising the maintainer account behind keyv, cacheable, flat-cache and file-entry-cache to publish a poisoned keyv@6.0.0.