@subql/common 5.8.3

What happened

• The release workflow swapped in a payload. It ran on install and on import and read GitHub runner memory, AWS Secrets Manager, Vault and Kubernetes secrets. Clean: 5.8.2.

Sources

• https://www.stepsecurity.io/blog/subql-ecosystem-compromised

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.