🧰 npm

The items that name it 286

• Binance’s $6.3 Billion Hack Puts Developer Machine Security in Focus
  articleas classification.technologies2026-10-30
• Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach
  articleas affected products2026-10-30It is written here as npm (malicious package react-html2pdf.js, posing as a popular library, published March 2025).

  malicious package react-html2pdf.js, posing as a popular library, published March 2025

• Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace
  articleas classification.technologies2026-10-30
• Earliest Known PolinRider Malware Found in 2025 npm Packages
  writeupas tools2026-10-30

  Registry where the nine malicious versions were published (npm 10.9.2, Node 22.14.0 for burst versions)

• The OpenSourceMalware Show #27
  talkas classification.technologies2026-10-29
• David Gutierrez | Eng (@david_x_ai) on X
  threadas classification.technologies2026-10-26
• Benjamin👨‍💻 (@Hislordship_9) on X
  threadas tools2026-10-26It is written here as npm (package manager used to run npm install function-color).

  package manager used to run npm install function-color

• David Gutierrez | Eng (@david_x_ai) on X
  threadas classification.technologies2026-10-25
• ADLC Security Best Practices for Teams Shipping with Coding Agents | Endor Labs
  articleas classification.technologies2026-10-23
• Spectrmachina/Ztrust
  repoas classification.technologies2026-10-22
• Software supply chain security best practices for 2026
  articleas affected products2026-10-21
• The OpenSourceMalware Show #26
  talkas classification.technologies2026-10-21
• vlt 1.5.0 Adds Agent Skills Management
  articleas classification.technologies2026-10-21
• Sign Here: Attributing a Source for a More Trustworthy Software Supply Chain
  paperas classification.technologies2026-10-20
• Supply Chain Zero Days: Closing the Gap Between Publication and Detection
  articleas classification.technologies2026-10-19
• Santhosh Patel (@santhosh_patell) on X
  threadas classification.technologies2026-10-19
• FastFix AI (@FastfixAI) on X
  threadas classification.technologies2026-10-18
• MemTensor Compromise: Poisoned MemOS Releases on npm and PyPI
  articleas classification.technologies2026-10-18
• CyrilXBT (@cyrilXBT) on X
  threadas classification.technologies2026-10-17
• Bravish (@bravish_) on X
  toolas classification.technologies2026-10-17
• Why Your SCA is Always Wrong | Endor Labs
  articleas affected products2026-10-16It is written here as npm (JavaScript package manager).

  JavaScript package manager

• VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?
  articleas classification.technologies2026-10-15
• Package managers have an integrity problem
  writeupas classification.technologies2026-10-14
• Agent Baseline Publishes Security Reference Architecture for Software Factories
  articleas classification.technologies2026-10-13
• Codex CLI installs a persistent, self-updating background daemon by default
  threadas classification.technologies2026-10-12
• 2024 Dependency Management Report | Endor Labs
  paperas affected products2026-10-12It is written here as npm (18% of OSV npm vulnerabilities lack CVE aliases).

  18% of OSV npm vulnerabilities lack CVE aliases

• State of Dependency Management 2025 | Endor Labs
  paperas classification.technologies2026-10-12
• Supply Chain Attack targeting Cline installs OpenClaw | Endor Labs
  writeupas classification.technologies2026-10-12
• New research: malware in open source ecosystems surges 14x as attackers hijack trusted packages | Endor Labs
  articleas classification.technologies2026-10-12
• How a Misconfigured CI Workflow Became an npm Supply-Chain Compromise | Blog | Endor Labs
  writeupas classification.technologies2026-10-12
• ♫Why♥Not♪ (@Python_s_) on X
  advisoryas classification.technologies2026-10-09
• In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
  articleas classification.technologies2026-10-09
• The OpenSourceMalware Show #24
  talkas classification.technologies2026-10-09
• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  articleas classification.technologies2026-10-08
• Tensorlake npm Package Compromised to Spread Shai-Hulud Worm
  articleas classification.technologies2026-10-08
• Top MCP security resources — October 2026
  articleas classification.technologies2026-10-08
• Tensorlake npm package compromised by Shai-Hulud in latest software supply chain attack | Blog | Endor Labs
  advisoryas tools2026-10-08

  Package registry/install tool abused via preinstall hook execution and used to check/exchange tokens, resolve maintainer info, and republish the malicious payload

• tensorlake NPM package compromised with Shai Hulud worm
  writeupas classification.technologies2026-10-08
• TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
  writeupas classification.technologies2026-10-08
• Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It
  writeupas classification.technologies2026-10-08
• Evolution of Web3 in Cloud Supply Chain Attacks
  articleas classification.technologies2026-10-07
• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-07
• How to Investigate a GitHub Repo's Real History
  writeupas classification.technologies2026-10-06
• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeupas tools2026-10-05

  Package registry/manager abused as distribution channel for malicious packages via preinstall/postinstall scripts and load-time execution

• SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors
  writeupas classification.technologies2026-10-05
• Jan Curn (@jancurn) on X
  threadas classification.technologies2026-10-03
• The OpenSourceMalware Show #23
  talkas classification.technologies2026-10-02
• MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
  articleas affected products2026-09-30It is written here as npm (Node.js package registry).

  Platform abused to distribute malicious packages including tlxbnhd, tldriver, mxdriver, img-to-native, cdn-img-fetch, function-flag, function-color, and Keyv (in the related Shai-Hulud campaign)

• upm Launches as a Fast, Tiny Package Manager Written in TypeScript
  articleas tools2026-09-29

  Default package manager shipped with Node.js, used as a compatibility/performance baseline in the comparison

• The OpenSourceMalware Show #22
  talkas classification.technologies2026-09-25
• Package Manager Sandboxing (Andrew Nesbitt)
  articleas classification.technologies2026-09-24
• DistillGuard: Malicious NPM Package Detection and API Attack Chain Analysis via Static Graph and LLM Distillation
  paperas classification.technologies2026-09-24
• Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)
  writeupas tools2026-09-24

  Package manager that the vulnerable upgrade endpoint runs (npm install -g opencode-ai@VERSION); it accepts remote tarball URLs and runs preinstall scripts

• Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
  writeupas classification.technologies2026-09-23
• MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack
  writeupas classification.technologies2026-09-23
• Novel supplychain.local Go worm appears
  writeupas classification.technologies2026-09-23
• npm Supply-Chain Attack Abuses Trusted Publishing to Ship GHAPPIER Loader
  articleas classification.technologies2026-09-22
• Graphalgo campaign spreads to Terraform providers and Go Modules
  writeupas classification.technologies2026-09-22
• Socket: Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
  writeupas classification.technologies2026-09-20
• Happy Birthday, Shai-Hulud
  articleas classification.technologies2026-09-18
• WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
  writeupas classification.technologies2026-09-17
• GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
  articleas classification.technologies2026-09-16
• y0usaf/pi-jev
  repoas classification.technologies2026-09-16
• Dependabot vs Renovate
  articleas classification.technologies2026-09-14
• Malicious Code in Open Source: How to Detect It Before You Ship | Blog | Endor Labs
  articleas affected products2026-09-11

  Registry cited as a distribution channel with increasing publication of malicious OSS packages.

• How to Defend Against NPM Software Supply Chain Attacks | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• Why Cooldown Windows Belong in Every npm Security Strategy | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• Shai-Hulud 2 Malware Campaign Targets GitHub and Cloud Credentials Using Bun Runtime | Blog | Endor Labs
  writeupas classification.technologies2026-09-11
• SolarWinds took a nation-state. The next attack just needs an LLM and $5. | Blog | Endor Labs
  articleas affected products2026-09-11

  Ecosystem compromised by TeamPCP; also targeted in the July 2025 phishing campaign and the Shai-Hulud worm campaigns.

• AI-Generated Malware Risk: A Practical Guide for Developers | Blog | Endor Labs
  articleas affected products2026-09-11

  Open source package registry cited as vulnerable to AI-generated malicious packages and typosquatting

• The OpenSourceMalware Show #20
  talkas classification.technologies2026-09-09
• GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
  articleas classification.technologies2026-09-08
• vet (SafeDep)
  repoas classification.technologies2026-09-07
• Shai-Hulud Rises From the Dead after 111 days
  writeupas classification.technologies2026-09-07
• ForgeGuardian
  repoas affected products2026-09-05
• The React Native Developer's Security Guide
  repoas classification.technologies2026-09-05
• Hallucinated Packages: How AI Invents Dependencies Attackers Exploit | Blog | Endor Labs
  articleas classification.technologies2026-09-02
• Introducing deny list egress policies for Harden-Runner
  articleas classification.technologies2026-09-02
• The dark figure of supply chain detection
  articleas classification.technologies2026-09-01
• Claude Code & Gemini CLI: GitHub Issue → CI Secrets
  writeupas classification.technologies2026-09-01
• Mini Shai-Hulud worm hits openapi-react-query-codegen, spreads across npm, RubyGems, and PyPI | Blog | Endor Labs
  writeupas classification.technologies2026-08-31
• PackageGuard
  repoas affected products2026-08-31

  Package ecosystem scanned by PackageGuard for dependencies, licenses and risk

• Socket: When Autonomous Agents Escape
  articleas classification.technologies2026-08-30
• @7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow
  writeupas classification.technologies2026-08-28
• Dev Machine Guard Now Inventories Where Developer Credentials Live
  articleas classification.technologies2026-08-28
• Popular code generator for TanStack Query hit by supply chain worm
  writeupas classification.technologies2026-08-28
• The OpenSourceMalware Show #19
  talkas classification.technologies2026-08-28
• vibecheck
  repoas classification.technologies2026-08-27
• numasec
  repoas tools2026-08-27

  package manager used to install numasec globally ('npm install -g numasec')

• Customer Zero: Implementing Package Firewall at Endor Labs | Blog | Endor Labs
  articleas classification.technologies2026-08-25
• JFrog: Coding Agents Just Reopened Your Software Supply Chain Blind Spot
  articleas affected products2026-08-25
• NPM Isn't Prepared For North Korean PolinRider Attack
  writeupas tools2026-08-25

  JavaScript package registry; subject of the case study's criticism for version-specific takedown model and malware scanning at publish time (announced July 2026)

• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.technologies2026-08-24
• The State of Open Source Supply Chain Attacks
  articleas classification.technologies2026-08-23
• agentgg
  repoas classification.technologies2026-08-23
• What is CVE remediation in 2026?
  articleas classification.technologies2026-08-21
• archcanary
  repoas classification.technologies2026-08-21
• The OpenSourceMalware Show #18
  talkas classification.technologies2026-08-21
• Windows Infostealer Hits npm and Ruby
  writeupas affected products2026-08-19

  Package ecosystem targeted; 40 malicious packages (37 documented by OpenHack plus typecript-cli, typecript-core, typescrit-cli found by this report) typosquatting chalk, commander, lodash, typescript, react, and axios, published across five accounts in an 8-minute burst starting 02:48 UTC Aug 16, re

• Putting models to the secure coding test: Plan vs default mode
  articleas classification.technologies2026-08-19
• ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2
  writeupas classification.technologies2026-08-16
• The OpenSourceMalware Show #17
  talkas affected products2026-08-14

  Granular access tokens configured to bypass two-factor authentication (2FA) could perform sensitive account, org, and package management actions

• [tl;dr sec] #341 - Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements
  articleas classification.technologies2026-08-13
• VaultKeepR/vaultkeepr-public
  repoas classification.technologies2026-08-12
• Why NPM Malware Keeps Reaching for Bun | Supply Chain Security | Blog | Endor Labs
  articleas classification.technologies2026-08-12
• npm Now Scans for Malware at Publish, Not Install | Blog | Endor Labs
  articleas affected products2026-08-12

  World's largest software registry; now scans every published package for malware before it goes live

• Control Which Package Registries Your CI Jobs and Developer Machines Use
  articleas affected products2026-08-12

  package manager resolving registries via .npmrc; default public registry registry.npmjs.org

• 77 "Evil Twin" Open VSX Extensions
  articleas classification.technologies2026-08-08
• Xygeni Malicious Code Digest 82
  articleas classification.technologies2026-08-08
• The OpenSourceMalware Show #16
  talkas classification.technologies2026-08-08
• Russian AI Slopsquatting Publishes 700+ Malicious NPM Packages
  writeupas classification.technologies2026-08-06
• Cloud Threat Highlights: H1 2026
  writeupas affected products2026-08-06

  Package ecosystem targeted by TeamPCP, Shai-Hulud follow-ons, Miasma, IronWorm campaigns.

• Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
  articleas classification.technologies2026-08-06
• SecureAI-Scan
  repoas classification.technologies2026-08-05
• npm-scan
  repoas classification.technologies2026-08-05
• New npm Worm Hits 400+ Packages Including Keyv, Cachable
  writeupas classification.technologies2026-08-05
• NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
  advisoryas classification.technologies2026-08-04
• keyv and cacheable npm Package Hijacked in Supply Chain Attack
  writeupas classification.technologies2026-08-04
• Keyv and friends compromised in active Shai-Hulud supply chain attack
  advisoryas classification.technologies2026-08-04
• Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks
  writeupas classification.technologies2026-08-04
• 'ChainDrop' worm compromises hundreds of popular npm packages
  writeupas classification.technologies2026-08-04
• Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
  articleas affected products2026-08-03

  Registry/package manager exploited by Shai-Hulud and Axios attacks via plaintext credential storage and postinstall scripts

• Anthropic Incident: An AI Agent Published a Malicious Package to PyPI and 15 Real Systems Ran It
  articleas affected products2026-08-03

  Cited as sharing the same install-time/import-time arbitrary code execution property as PyPI.

• NullReceiver's Blank Crypto Transfers Solves the Challenges of EtherHiding
  writeupas classification.technologies2026-08-02
• The OpenSourceMalware Show #15
  talkas classification.technologies2026-07-31
• PolinRider Caused Dozens of npm, Go, PHP Compromises
  writeupas classification.technologies2026-07-31
• NPM Implements Pre-Publication Malware Scanning, But Will It Work?
  articleas classification.technologies2026-07-31
• Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
  writeupas classification.technologies2026-07-30
• Slopsquatting: When AI Agents Hallucinate Malicious Packages | Blog | Endor Labs
  articleas affected products2026-07-29

  public package registry where attackers register hallucinated package names loaded with malware

• AI-Generated Malware and the Software Supply Chain | Blog | Endor Labs
  articleas affected products2026-07-29

  Package registry where 92% of all account takeovers involve an attacker compromising a legitimate maintainer's account to distribute malware through trusted packages

• Dependency Confusion: How Attackers Poison Your Build | Blog | Endor Labs
  articleas affected products2026-07-29

  package manager affected by event-stream hijacking (2018) and Shai-Hulud worm (2025)

• Socket: Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers
  writeupas classification.technologies2026-07-29
• Socket: Fake Corepack Site Distributes Infostealer and Proxyware to Developers
  writeupas tools2026-07-25

  Legitimate registry from which to install Corepack safely (npm install -g corepack)

• Homebrew 6.0.0 security update
  articleas classification.technologies2026-07-24
• The OpenSourceMalware Show #14
  talkas affected products2026-07-23
• Socket: New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs
  articleas affected products2026-07-23
• Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization
  articleas affected products2026-07-23

  Registry publishing tokens targeted for theft; supports OIDC trusted publishing

• The upgrade trap: when upgrading is the wrong answer to a CVE
  articleas classification.technologies2026-07-22
• Agentless Threat Detection: Illuminating Cloud Blind Spots
  articleas classification.technologies2026-07-21
• Security notice and deprecation: standalone circleci-mcp-server
  advisoryas classification.technologies2026-07-20
• AI Security Briefing
  paperas affected products2026-07-18

  package ecosystem where nearly every model installs the untrusted dependency via source-based attacks

• OpenSourceMalware Blog
  articleas tools2026-07-18It is written here as npm (v12).

  Package manager; new version closes security gaps including making install scripts opt-in; staged publishing also discussed.

• ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
  writeupas classification.technologies2026-07-17
• Socket: Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping
  articleas classification.technologies2026-07-17
• The OpenSourceMalware Show #13
  talkas classification.technologies2026-07-16
• Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories
  writeupas classification.technologies2026-07-16
• Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners
  articleas classification.technologies2026-07-16
• Socket: Coordinated npm/PyPI Campaign Typosquats Paysafe, Skrill, Neteller Payment SDKs
  writeupas classification.technologies2026-07-16
• Socket: npm v12 Ships With Install Scripts Off by Default
  articleas affected products2026-07-15

  npm CLI/package manager; ships with install scripts off by default and begins deprecating 2FA-bypass granular access tokens

• How Unprotected Release Branches Let Attackers Compromise AsyncAPI | Blog | Endor Labs
  writeupas classification.technologies2026-07-14
• M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
  writeupas classification.technologies2026-07-14
• AsyncAPI npm packages backdoored via GitHub Actions
  writeupas classification.technologies2026-07-14
• How Aikido Intel detects malware and vulnerabilities first
  articleas classification.technologies2026-07-13
• What is a dependency firewall?
  articleas affected products2026-07-13

  package manager/registry; install scripts (postinstall hooks) are the payload delivery mechanism; now supports minimum release age setting

• GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps
  articleas classification.technologies2026-07-12
• Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys
  writeupas classification.technologies2026-07-12
• jscrambler npm package publishes malicious preinstall binary
  writeupas classification.technologies2026-07-12
• GitHub Action Canaries
  repoas classification.technologies2026-07-11
• agent-aegis
  repoas classification.technologies2026-07-11
• DataDog/guarddog
  repoas classification.technologies2026-07-11
• jscrambler npm Package Compromised in Supply Chain Attack
  writeupas classification.technologies2026-07-11
• The Bitwarden CLI Supply Chain Attack: What Happened and What to Do | Blog | Endor Labs
  writeupas classification.technologies2026-07-10
• Cybersecurity Startup Publishes Infostealers to NPM
  writeupas tools2026-07-09

  JavaScript package registry/installer abused via preinstall/postinstall scripts to achieve arbitrary code execution on install

• The OpenSourceMalware Show #12
  talkas affected products2026-07-09

  Registry where a cybersecurity startup published seven (or eleven) infostealer packages; also referenced regarding new mass-revoke features being implemented.

• Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
  writeupas classification.technologies2026-07-09
• Compromised Injective SDK npm Package Exfiltrates Wallet Keys and Mnemonics
  advisoryas classification.technologies2026-07-09
• Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)
  articleas classification.technologies2026-07-09
• PolinRider Jumps the Fence to Go, Packagist, npm, PyPI
  writeupas affected products2026-07-08

  GitHub maintainers of npm packages were hit, but no malicious force pushes made it into the npm registry itself (separate publish credential required); PolinRider also publishes 'malicious from birth' npm packages weekly, including typosquats of tailwindcss-animate and similar.

• One Request to Own Every Repo: How We Hijacked GitLab Through Its MCP Server - Pluto Security
  writeupas classification.technologies2026-07-06
• The OpenSourceMalware Show #11
  talkas affected products2026-07-02It is written here as npm (NPM).

  Package registry affected by account takeover risks; subject of new preventative account protection for high-impact accounts

• Socket: PolinRider
  writeupas classification.technologies2026-07-02
• Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised
  writeupas classification.technologies2026-07-01
• Maven Support Comes to GitHub Checks and OSS Package Search
  articleas affected products2026-07-01

  PostHog's npm packages compromised in Shai-Hulud second wave

• Multiple @immobiliarelabs Backstage Plugins Compromised on npm
  advisoryas classification.technologies2026-07-01
• And another one. GitHub ships break-glass credential revocation
  articleas affected products2026-07-01

  Updated by Microsoft in June to stop automatic postinstall scripts.

• Socket: Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
  writeupas classification.technologies2026-06-27
• npm now freezes high-impact accounts after risky account changes
  articleas classification.technologies2026-06-26
• Packagist is now protected by Aikido Intel and other updates to the PHP registry
  articleas classification.technologies2026-06-26
• Thinkst Package Proxy
  toolas affected products2026-06-26

  Node package manager registry targeted by malicious/backdoored packages; supported by Package Proxy

• Introducing GuardDog 3.0: new YARA rules engine, risk scoring, and sandboxing
  articleas affected products2026-06-26

  Package ecosystem scanned by GuardDog; used in examples (react, my-project/package.json).

• The OpenSourceMalware Show #10
  talkas affected products2026-06-25It is written here as npm (NPM registry/package manager).

  NPM registry/package manager

• Everybody's shipping code they can't read
  articleas classification.technologies2026-06-25
• Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets
  writeupas classification.technologies2026-06-24
• Socket: actions/checkout v7 Blocks Unsafe pull_request_target Checkouts
  articleas classification.technologies2026-06-22
• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeupas classification.technologies2026-06-20
• The OpenSourceMalware Show #9
  talkas affected products2026-06-18It is written here as npm (registry).

  Criticized for inconsistent/incomplete takedown practices (removed malicious package version but left threat-actor-controlled decoy package live); npm 12 changing install scripts to opt-in by default

• JFrog: npm v12
  articleas affected products2026-06-18

  package manager; new security controls allowScripts, --allow-git, --allow-remote

• Socket: Introducing Manifest Alerts
  articleas affected products2026-06-18

  supported ecosystem for missing lockfile detection and remediation guidance

• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  articleas classification.technologies2026-06-18
• 400+ AUR Packages Hijacked: What the “Atomic Arch” Campaign Means for Supply-Chain Security
  writeupas classification.technologies2026-06-18
• Prevent npm and Python Supply Chain Attacks on Developer Machines with Package Configs
  articleas classification.technologies2026-06-18
• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeupas classification.technologies2026-06-18
• Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
  writeupas classification.technologies2026-06-18
• One Fake Bug Report Hijacked a $250B Company’s AI Agent
  articleas classification.technologies2026-06-17
• Socket: npm Package Uses Prompt Injection + Token Flooding to Evade AI Malware Scanners
  writeupas classification.technologies2026-06-17
• Over 140 popular Mastra npm Packages Hit by Supply Chain Attack
  writeupas classification.technologies2026-06-17
• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeupas classification.technologies2026-06-16
• VICE
  repoas classification.technologies2026-06-14
• Socket: pnpm 11.5 Fixes False Trust-Downgrade Alerts for npm Staged Publishes
  articleas tools2026-06-13

  Package registry/CLI supporting classic publishing, trusted publishing (OIDC via CI/CD), and staged publishing (2FA-backed review step before a version becomes installable)

• Socket: RubyGems Bundler 4.0.13 Adds Opt-In Cooldown for Newly Published Gems
  articleas tools2026-06-13

  package manager that later added a similar minimumReleaseAge setting to delay dependency updates

• Socket: npm Tooling Bug Incorrectly Marks 13 Single-Character Packages as Security Holders
  articleas classification.technologies2026-06-13
• OpenSource Malware: Active Malware Campaigns in January-May 2026
  writeupas classification.technologies2026-06-12
• npm v12 delivers one of the biggest security improvements in years
  articleas affected products2026-06-11

  Default behavior around install scripts, git dependencies, and remote-URL dependencies changes across these versions.

• The OpenSourceMalware Show #8
  talkas affected products2026-06-11It is written here as npm (package manager).

  package manager

• The Pros and Cons of NPM v12's Security Improvements
  articleas affected products2026-06-10

  Upcoming breaking changes shipping around July 2026: install scripts (preinstall/install/postinstall/prepare, node-gyp builds) off by default; git dependencies require --allow-git; remote URL/HTTPS tarball dependencies require --allow-remote

• Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter
  writeupas classification.technologies2026-06-09
• Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
  writeupas affected products2026-06-09

  package manager that automatically runs node-gyp rebuild when a binding.gyp file is present, regardless of package.json scripts

• Active Malware Campaigns in January-May 2026
  writeupas classification.technologies2026-06-08
• Miasma Blight Reaches Microsoft: 73 Repos Disabled in 105 Seconds
  writeupas classification.technologies2026-06-06
• AWS Well-Architected: Software Supply Chain Security
  articleas classification.technologies2026-06-04
• Secret Scanning Dev Workstations with bagel + Fleet
  writeupas affected products2026-06-04

  Package manager cited as expanding workstation attack surface.

• Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
  writeupas classification.technologies2026-06-04
• The OpenSourceMalware Show #7
  talkas classification.technologies2026-06-03
• The Software Supply Chain Malware Landscape: January - May 2026
  articleas affected products2026-06-03

  Package ecosystem with 146,237 malicious threat records tracked, the leading ecosystem for malicious packages.

• Why EDR and proxy won’t save you from supply chain malware
  articleas tools2026-06-02

  Package manager; has its own HTTP client that can bypass proxy settings

• Nx Console VS Code Extension Compromised
  writeupas affected products2026-06-02

  credentials/OIDC tokens targeted; ecosystem previously targeted directly in August 2025 incident

• Multiple redhat-cloud-services npm Packages compromised
  writeupas classification.technologies2026-06-02
• Orca Security: Red Hat npm Packages Compromised in Supply-Chain Attack Spreading Credential-Stealing Worm
  articleas classification.technologies2026-06-02
• Orca Security: Critical RCE in LiquidJS (CVE-2026-45618)
  advisoryas classification.technologies2026-06-02
• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeupas classification.technologies2026-06-01
• Miasma: Supply Chain Attack Targeting RedHat npm Packages
  writeupas classification.technologies2026-06-01
• Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages
  writeupas classification.technologies2026-06-01
• CVE Lite CLI
  repoas classification.technologies2026-05-31
• Socket: node-ipc npm Package Compromised
  writeupas classification.technologies2026-05-30
• What MDM can't protect on developer machines (and what to do about it)
  articleas classification.technologies2026-05-28
• Socket: OSV Withdraws 157 Malware Reports
  articleas classification.technologies2026-05-28
• Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens
  writeupas tools2026-05-27

  Package registry used to distribute the malicious codexui-android package

• Hard Truths: You've Built a Security Stack. Have You Built a False Sense of Security? | Tanya Janca
  videoas technologies2026-05-27
• Threat Actor Targets Crypto Organizations | Wiz Blog
  writeupas classification.technologies2026-05-27
• Socket: TrapDoor Crypto Stealer
  writeupas classification.technologies2026-05-26
• Bumblebee
  repoas classification.technologies2026-05-24
• Socket: Malicious Postinstall Hook Compromises 8 PHP/Node Packages on Packagist
  writeupas classification.technologies2026-05-23
• Socket: AI Has Taken Over Open Source
  articleas affected products2026-05-23

  Package registry experiencing exponential growth in new packages since January 2026, driven by AI coding tools

• Socket: Coruna Respawned
  writeupas classification.technologies2026-05-22
• Socket: Mini Shai-Hulud
  articleas classification.technologies2026-05-22
• Open Source Malware Podcast — episodes
  otheras affected products2026-05-22

  v12 breaking changes; also new worm, staged publishing feature, 2FA-bypass tokens killed, 72-hour read-only lockout

• JFrog: The Governance Gap Between Your Policy and Your Pipeline
  articleas affected products2026-05-21

  Overtook Maven as most-used package ecosystem by request volume; 171,592 malicious packages detected in 2025.

• Socket: Mini Shai-Hulud Hits @antv Ecosystem
  writeupas classification.technologies2026-05-20
• Socket: TeamPCP + BreachForums Launch $1,000 Contest for Supply Chain Attacks
  articleas affected products2026-05-20

  Open source package ecosystem targeted by TeamPCP

• Socket: TanStack npm Packages Compromised
  writeupas classification.technologies2026-05-20
• Second Time, Same Sandbox: Another Anthropic Claude Code Network Sandbox Bypass Enables Data Exfiltration
  writeupas classification.technologies2026-05-20
• StepSecurity + Endor Labs: Mini-Shai-Hulud Wave 2
  writeupas classification.technologies2026-05-19
• Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages
  articleas classification.technologies2026-05-19
• FOSSA: Mini-Shai-Hulud Mass Compromise
  writeupas classification.technologies2026-05-18
• VSCode Lifecycle Script Malware
  writeupas classification.technologies2026-05-16
• Agentic Workflows
  articleas classification.technologies2026-05-13
• DeepSec
  repoas classification.technologies2026-05-13
• Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
  writeupas classification.technologies2026-05-11
• The complete GitHub Actions security checklist
  articleas affected products2026-05-11

  Package registry lacking native minimum release age support (unlike pnpm/yarn); supports provenance attestations for GitHub Actions-published packages; target of trusted publisher scoping guidance.

• SanMuzZzZz/LuaN1aoAgent
  repoas classification.technologies2026-05-08
• Socket: pnpm 11 Adds Supply Chain Protection Defaults
  articleas affected products2026-05-07

  Ecosystem affected by the Mini Shai-Hulud supply chain campaign.

• Socket: Bitwarden CLI Compromised in Checkmarx Supply Chain Campaign
  writeupas classification.technologies2026-05-06
• TeamPCP SAP CAP Attack
  writeupas classification.technologies2026-05-06
• TanStack npm Brand-Squat
  writeupas classification.technologies2026-05-06
• Mini Shai-Hulud Worm (Apr–May 2026)
  articleas classification.technologies2026-05-06
• Cooldowns.dev
  articleas tools2026-05-06

  Node.js package manager; min-release-age cooldown option (added 11.10.0) and min-release-age-exclude per-package exemptions (11.17.0).

• microsoft/AntiSSRF
  repoas classification.technologies2026-05-06
• Palantir
  articleas classification.technologies2026-05-05
• Negative Days in LLM Workflows
  writeupas classification.technologies2026-05-05
• Tradecraft Tuesday Recap: axios npm Supply Chain Compromise
  articleas tools2026-04-21It is written here as npm (Node Package Manager).

  Software component library/package manager for the JavaScript ecosystem, used by developers to reuse pre-written code

• Supply Chain Compromise of axios npm Package
  writeupas classification.technologies2026-03-31
• The Evolving Linux Threat Landscape
  articleas classification.technologies2026-03-03
• Esbuild
  writeupas classification.technologies2025-11-20
• AikidoSec/safe-chain
  repoas classification.technologies
• SubQuery npm package (@subql/common) compromised with credential-stealing payload
  articleas classification.technologies
• Active Supply Chain Attack: Malicious node-ipc Versions Published to npm
  writeupas classification.technologies
• Agent Threat Rules (ATR) — open detection-rule standard for AI agent threats
  repoas classification.technologies
• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
  articleas classification.technologies
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas classification.technologies
• 973 MCP Packages, 71% Single-Maintainer: A Practitioner
  articleas classification.technologies
• Vulnerability Database - OSV
  advisoryas classification.technologies
• CVE-2026-65056: mcp-webresearch 0
  advisoryas classification.technologies
• Flowise MCP Security Bypass Enables RCE
  advisoryas classification.technologies
• CVE-2026-44895 - GitHub Advisory Database
  advisoryas classification.technologies
• git-pkgs — dependency history & supply-chain analysis for git repos
  repoas classification.technologies
• shai-hulud-detect: multi-ecosystem npm/PyPI/Composer/Crates/Go/Hex/RubyGems supply-chain worm scanner
  repoas classification.technologies
• Supply Chain Firewall (Datadog)
  repoas affected products

  package manager whose install commands are inspected by Supply Chain Firewall

• Compromised npm Packages in the AsyncAPI Namespace Deliver Miasma Botnet Loader
  writeupas classification.technologies
• Shai-Hulud-2.0-Detector — npm supply-chain compromise scanner
  repoas classification.technologies
• SANDWORM_MODE: Dissecting a Multi-Stage npm Supply Chain Attack | Blog | Endor Labs
  writeupas classification.technologies
• affaan-m/agentshield
  repoas classification.technologies
• sage — Agent Detection & Response (ADR) for AI coding agents
  repoas classification.technologies
• Megalodon: Mass GitHub Actions Secret Exfiltration Across 5,500+ Public Repositories - StepSecurity
  writeupas classification.technologies
• Introducing Secure Registry: install-time defense for the npm supply chain - StepSecurity
  articleas classification.technologies
• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas classification.technologies
• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas classification.technologies

In every workspace you can read 326