🎯 Maintainer account takeover

The items that name it 3

• AI-Generated Malware and the Software Supply Chain | Blog | Endor Labs
  article2026-07-29

  Attacker compromises a legitimate maintainer's account and uses it to distribute malware through trusted packages; 92% of all account takeovers on npm

• Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials
  writeup2026-07-25

  Attacker compromised maintainer account ziofil on GitHub to push malicious commits to the mrmustard repository.

• Socket: PolinRider
  writeup2026-07-02

  Compromise of GitHub maintainer accounts, possibly via expired domain takeover or another account recovery path, enabling bulk repository modification