Supply-chain attacksBrief
Late-October malware advisory flood
112 GitHub malware advisories covering 106 packages (96 npm, 10 PyPI) between 26 and 28 Oct 2026.
Supply-chain attacks
Poisoned packages, hijacked maintainers, and compromised CI actions and extensions.
Live list of confirmed malicious packages: supply-chain malware tracker.
October 2026 10
CriticalSupply chainPatch available
LiteLLM 1.107.0: poisoned PyPI and Docker release built from a lookalike repository
Attackers with stolen gh CLI tokens shipped malware as LiteLLM 1.107.0 on PyPI, Docker Hub and GHCR. Check before running Python, then rebuild and rotate.
Supply-chain attacksBrief
OVHcloud CLI GitHub release assets swapped
Releases v0.11.0 to v0.15.0 had binaries and `checksums.txt` replaced with an infostealer for about 94 minutes.
Supply-chain attacksBrief
TeamUpdraft (UpdraftPlus vendor) key compromise
UpdraftCentral, Vault and Clone keys stolen.
Supply-chain attacksBrief
Rank Math PRO WordPress plugin backdoor
3.0.123 served a self-restoring backdoor for about 11 hours.
Supply-chain attacksConfirmed malwareAutomated alert
pxnpm (npm): malicious versions published to a widely used package
MAL-2026-17710 confirms malicious code in pxnpm 7.0.0, 7.0.0-beta.6, 7.0.0-beta.8 and 2 more. The package had 165 clean releases before it.
Supply-chain attacksBrief
tensorlake npm 0.5.144
A worm (ChainDrop / Shai-Hulud lineage, possibly covered) that wipes the host if its token is revoked.
Supply-chain attacksBrief
@subql/common 5.8.3
The release workflow swapped in a payload.
Supply-chain attacksBrief
Hugging Face “Load/Mine”: 31 malicious model repos
Fake Qwen2 test checkpoints across 7 accounts delivered miners and backdoors through `trust_remote_code`.
Supply-chain attacksBrief
GhostAction resurgence
GitGuardian (31 Aug to 30 Sep): 772 repos, 373 owners, 2,577 secrets.
September 2026 2
Supply-chain attacksBrief
actions-cool/issues-helper and maintain-one-comment re-enabled with malware
Both were compromised in May 2026. The repos came back on 16 Sep with the payload still in place, so tag-pinned workflows ran it again.
Supply-chain attacksBrief
Radware: GitHub issue / PR comment injection campaign
83 malicious issues, PRs and comments across 61 repos, including LangExtract, Trivy and MLflow.
July 2026 2
Supply-chain attacksBrief
npm v12 disables dependency install scripts by default
Install scripts are off by default (reported ship date 8 Jul 2026).
Supply-chain attacksBrief
SleeperGem: dormant RubyGems maintainer accounts
At least two accounts dormant since 2019 were taken over.
June 2026 1
Supply-chain attacksBrief
Hades campaign on PyPI (Graph ML / bioinformatics)
Including ensmallen 0.8.101. Memory scrapers, prompt-injection strings aimed at AI analysts, and a wiper deterrent.
May 2026 4
Supply-chain attacksBrief
Microsoft durabletask PyPI (1.4.1 to 1.4.3)
Three versions uploaded within 35 minutes.
CriticalSupply chainPatch available
TanStack to Nx Console to GitHub: one poisoned npm install led to ~3,800 stolen internal repos (CVE-2026-45321, CVE-2026-48027)
Poisoned TanStack packages stole an Nx developer’s GitHub token. A trojaned Nx Console release then hit GitHub and Grafana. Check installs, rotate tokens.
Supply-chain attacksBrief
TrapDoor across npm, PyPI and crates.io
34 packages, credential theft plus persistence.
Supply-chain attacksBrief
BufferZoneCorp: Go modules and RubyGems that hijack CI
17 packages (10 Go, 7 `knot-*` gems). `extconf.rb` and `init()` steal SSH, AWS, npm, gh and kube credentials and add a deploy SSH key.
April 2026 3
Supply-chain attacksBrief
PyTorch Lightning PyPI compromise (2.6.2 / 2.6.3)
Publisher account takeover. Live 42 minutes.
Supply-chain attacksBrief
Malicious Hugging Face model posing as an OpenAI release
HiddenLayer: 244K downloads. Decoy loader followed by a hidden infection chain.
Supply-chain attacksBrief
elementary-data PyPI and GHCR backdoor
A script-injection flaw in GitHub Actions plus a forged signed tag led to a malicious 0.23.3.
March 2026 2
CriticalSupply chainPatch available
axios npm hijack: versions 1.14.1 and 0.30.4 installed a North Korean RAT via plain-crypto-js
A hijacked maintainer account published axios 1.14.1 and 0.30.4 with a dependency that installs a remote access trojan. Check lockfiles for plain-crypto-js.
CriticalSupply chainMonitoring
TeamPCP campaign (CVE-2026-33634): Trivy, KICS, LiteLLM and Telnyx turned into credential stealers
Poisoned Trivy and KICS actions and images, LiteLLM 1.82.7/1.82.8 and Telnyx 4.87.1/4.87.2 stole CI and developer secrets. Check, then rotate.
February 2026 1
Supply-chain attacksBriefOn CISA KEV
Notepad++ update infrastructure hijack (CVE-2025-15556), Jun to Dec 2025
China-nexus Lotus Blossom compromised the hosting provider and selectively served malicious updates.
November 2025 1
CriticalSupply chainOngoing
Shai-Hulud npm worm: check installs, rotate tokens, kill rogue runners
A self-replicating npm worm runs at install time, steals developer and CI secrets, and registers rogue GitHub runners. New waves hit from April to August 2026.
October 2025 2
Supply-chain attacksBrief
PhantomRaven, npm remote dynamic dependencies
126 packages, about 86k downloads. Dependencies pulled from an attacker URL, invisible to scanners.
Supply-chain attacksBrief
GlassWorm, Open VSX / VS Code, Oct 2025 onward
Oct 2025: self-propagating extensions using invisible-Unicode code and Solana/Google Calendar C2.
September 2025 4
Supply-chain attacksBrief
chalk/debug: Qix maintainer phished, 18 packages
Phishing domain npmjs.help. Malicious chalk 5.6.1, debug 4.4.2, ansi-styles 6.2.2, strip-ansi 7.1.1 and 14 others.
Supply-chain attacksBrief
postmark-mcp, the first malicious MCP server on npm
v1.0.16 silently BCC’d every email sent through the tool to the attacker.
Supply-chain attacksBrief
GhostAction (first wave)
Stolen accounts pushed a malicious “Github Actions Security” workflow that sent secrets to an attacker endpoint.
Supply-chain attacksBrief
crates.io typosquats faster_log / async_println
Stole Solana and Ethereum keys from source files.
August 2025 2
Supply-chain attacksBrief
Nx “s1ngularity” (GHSA-cxm3-wv7p-598c)
Root cause: a `pull_request_target` workflow injection stole the npm token.
Supply-chain attacksBrief
Leaked secrets in public Docker Hub images (2025)
Flare found 10k+ images leaking credentials.
July 2025 2
Supply-chain attacksBriefOn CISA KEV
eslint-config-prettier / is / synckit npm phishing hijack (CVE-2025-54313)
Maintainer phished through the `npnjs.com` lookalike domain.
Supply-chain attacksBrief
Amazon Q Developer VS Code extension wiper prompt
v1.84.0 shipped a prompt injection telling the agent to wipe local and AWS resources.
March 2025 1
Supply-chain attacksBriefOn CISA KEV
tj-actions/changed-files tag hijack (CVE-2025-30066) via reviewdog/action-setup (CVE-2025-30154)
14 to 15 Mar 2025. All tags were repointed to a commit that dumped runner memory secrets into public logs.
February 2025 2
Supply-chain attacksBrief
Hugging Face “nullifAI” broken-pickle models
ReversingLabs found models that evaded Picklescan by using 7z-compressed, broken pickles.
Supply-chain attacksBrief
Go module typosquat boltdb-go cached by proxy.golang.org
Backdoored typosquat of boltdb. The Go module mirror kept serving it for about 3 years.