# malicious packages Published articles for malicious packages. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks DevFeed: [CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks]() Original publisher: [Read original article]() Author: Anne Aarness - Chris Prall Published: 2026-09-12T11:17:51.295154Z Content type: article Language: en Sources: [Blog]() Topics: [Endpoint Security & XDR](), [supply-chain-security](), [Security](), [Open Source](), [Software](), [Artificial Intelligence](), [Claude](), [codex]() Tags: [agentic](), [ai](), [codex](), [credential-theft](), [developer](), [developers](), [development](), [endpoint-security-xdr](), [malicious-packages](), [open-source](), [open-source-packages](), [persistence](), [security](), [software-supply-chain](), [supply-chain]() ### AI overview The article describes CrowdStrike's Real-Time Supply Chain Attack Protection, embedded in the Falcon sensor, which detects and blocks malicious open-source packages before their code executes on enterprise endpoints. It explains how AI-assisted and agentic applications have expanded software supply chain risk beyond developer workstations to endpoints across the organization. ### Source excerpt Real-Time Supply Chain Attack Protection, embedded into the Falcon sensor, blocks malicious open-source packages at download to protect the endpoint. ## AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026) DevFeed: [AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026)]() Original publisher: [Read original article]() Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [GitHub Actions](), [npm packages](), [AsyncAPI Specification](), [Malware](), [GitHub](), [Remote Access Trojan](), [passwords](), [ssh](), [Cloud](), [Cryptocurrency]() Tags: [asyncapi-supply-chain-attack](), [chainguard-asyncapi](), [chainguard-libraries](), [ci](), [cloud](), [cryptocurrency](), [github](), [github-actions](), [github-actions-pwn-request](), [malicious-packages](), [malware](), [miasma](), [npm](), [npm-packages](), [passwords](), [personal-access-token](), [provenance](), [pull-requests](), [remote-access-trojan](), [ssh](), [supply-chain](), [tokens]() ### AI overview The article analyzes a July 14, 2026 supply-chain compromise in which an attacker stole a privileged GitHub personal access token through a misconfigured GitHub Actions workflow and used it to publish five backdoored versions across four AsyncAPI npm packages. The malware activates when a library is loaded by a build or CI job and steals browser passwords, SSH keys, npm and GitHub tokens, cloud credentials, and cryptocurrency wallets while maintaining command-and-control access. It also explains why Chainguard customers were protected and recommends treating affected environments as compromised and rotating credentials. ### Source excerpt A supply chain attack compromised AsyncAPI npm packages via GitHub Actions. See how Chainguard blocked the malicious releases by design. ## The Mastra AI Ecosystem Was Poisoned At The Registry Level DevFeed: [The Mastra AI Ecosystem Was Poisoned At The Registry Level]() Original publisher: [Read original article]() Author: Roshan Piyush Published: 2026-07-14T00:00:00Z Content type: article Language: en Sources: [Harness Blog]() Topics: [software supply-chain attack](), [npm packages](), [Malware](), [Artificial Intelligence](), [CI/CD](), [TypeScript](), [Cloud]() Tags: [ai](), [ci-cd](), [malicious-packages](), [malware](), [mastra](), [npm](), [npm-packages](), [software-supply-chain](), [software-supply-chain-attack](), [typescript]() ### AI overview The article examines a June 17, 2026 software supply-chain attack targeting the Mastra AI TypeScript ecosystem. It reports that a compromised contributor account was used to publish 144 malicious packages under the official @mastra npm scope, with registry-level changes introducing the easy-day-js transitive dependency. Installations during the compromise window could expose developer workstations, CI/CD runners, and cloud environments to an information stealer. ### Source excerpt Learn how the Mastra AI supply chain attack poisoned npm packages, impacted AI pipelines, and how Harness SCS helps detect, block, and remediate compromised dep | Blog ## Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards DevFeed: [Chainguard Launches Bugcrowd Bug Bounty With Up to $200,000 in Rewards]() Original publisher: [Read original article]() Published: 2026-07-06T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Bug Bounty](), [Security](), [Vulnerabilities](), [Exploit](), [npm packages]() Tags: [bounty](), [bug-bounty](), [bugcrowd-bug-bounty](), [chainguard-bug-bounty](), [chainguard-security](), [exploit](), [malicious-packages](), [npm-packages](), [security](), [security-contest](), [shai-hulud](), [supply-chain](), [vulnerabilities]() ### AI overview Chainguard is running a Bugcrowd bug bounty from July 6-27, offering up to $200,000 to researchers who find vulnerabilities in its infrastructure and products. ### Source excerpt Chainguard launches a Bugcrowd bounty with up to $200K in rewards, inviting researchers to test its infrastructure against real-world attacks. ## Chainguard and Upwind: Secure what you build. Verify what you run. DevFeed: [Chainguard and Upwind: Secure what you build. Verify what you run.]() Original publisher: [Read original article]() Published: 2026-05-26T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard libraries](), [supply-chain-security](), [malicious packages](), [Application Security](), [Vulnerabilities]() Tags: [application-security](), [chainguard](), [chainguard-libraries](), [chainguard-libraries-for-python](), [chainguard-scanners](), [chainguard-upwind](), [cybersecurity](), [malicious-packages](), [malware-scanners](), [security](), [supply-chain-attacks](), [upwind](), [vulnerabilities]() ### AI overview Chainguard announces that Upwind now scans Chainguard Libraries for Python. The article describes combining trusted software artifacts with runtime visibility to reduce noise and supply chain risk. ### Source excerpt Chainguard and Upwind combine trusted, source-built artifacts with runtime verification to cut noise, reduce risk, and secure AI-era software. ## Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloads DevFeed: [Chainguard artifacts safe from npm supply chain attack targeting SAP developer dependencies with 2.25M+ monthly downloads]() Original publisher: [Read original article]() Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [npm](), [npm packages](), [chainguard](), [GitHub](), [container images](), [Bun](), [Node.js]() Tags: [bun](), [chainguard-containers](), [chainguard-libraries](), [github](), [malicious-packages](), [mini-shai-hulud](), [node-js](), [npm](), [npm-malware](), [npm-worm](), [sap](), [security](), [shai-hulud](), [supply-chain](), [tokens]() ### AI overview A Shai-Hulud-style npm supply-chain attack compromised four SAP Cloud Application Programming Model dependencies with more than 2.25 million combined monthly downloads. The malicious packages used a preinstall hook to download Bun and harvest GitHub tokens, npm tokens, and other developer secrets. Chainguard customers were protected because Chainguard Libraries for JavaScript does not build or serve packages containing install-time scripts, and Chainguard Factory terminated rebuilds when it detected the hook. ### Source excerpt New npm worm targets 2.25M-download packages. Chainguard customers stayed protected by blocking install-time scripts and malicious dependencies. ## Chainguard customers safe from new npm worm and xinference supply chain attack DevFeed: [Chainguard customers safe from new npm worm and xinference supply chain attack]() Original publisher: [Read original article]() Published: 2026-04-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Malware](), [npm](), [Credential theft](), [Library](), [chainguard libraries](), [chainguard containers](), [GitHub]() Tags: [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-malware](), [credential-theft](), [github](), [malicious-packages](), [malware](), [npm](), [npm-malware](), [npm-worm](), [packages](), [pypi-malware](), [supply-chain](), [worm](), [xinference]() ### AI overview The article reports npm and PyPI malware attacks affecting 25 packages with more than 60,000 combined monthly downloads. It explains that Chainguard customers were protected because Chainguard builds from verifiable source code and rejects packages that rely on install-time scripts. ### Source excerpt New npm and PyPI malware hit many popular packages. Chainguard customers stayed protected by blocking install scripts and rebuilding only verified source code. ## 2026: The year of AI-assisted attacks DevFeed: [2026: The year of AI-assisted attacks]() Original publisher: [Read original article]() Published: 2026-04-14T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Artificial Intelligence](), [Cybercrime](), [Hacking](), [Large Language Model](), [Claude Code](), [ChatGPT](), [Malware]() Tags: [ai](), [ai-assisted-attacks](), [ai-containers](), [axios](), [breach](), [chainguard-for-ai](), [chatgpt](), [claude-code](), [code](), [cybercrime](), [llm](), [malicious-packages](), [malwhere](), [mythos](), [phishing](), [telnyx](), [trivy]() ### AI overview The article argues that AI-assisted attacks became more capable and accessible in 2025. It describes how ChatGPT, Claude Code, and other LLM-backed systems enabled nontechnical individuals and lone actors to conduct attacks previously associated with skilled hackers or organized teams, while citing increases in malicious packages, cloud intrusions, and AI-generated phishing. ### Source excerpt AI is lowering the barrier to cybercrime. Learn why attacks are rising fast, and how eliminating entire classes of supply chain risk is the only path forward. ## Chainguard Libraries is now free until June 30, 2026 -- no commitment required DevFeed: [Chainguard Libraries is now free until June 30, 2026 -- no commitment required]() Original publisher: [Read original article]() Published: 2026-04-09T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [open-source-security](), [Security](), [Malware](), [Java](), [JavaScript](), [Python]() Tags: [2026](), [article](), [attacks](), [axios](), [chainguard-console](), [chainguard-libraries](), [chainguard-repository](), [code](), [dependency](), [free](), [install](), [java](), [javascript](), [libraries](), [library](), [litellm](), [malicious-packages](), [malware](), [open-source](), [open-source-packages](), [open-source-security](), [packages](), [rebuilds](), [software-supply-chain-security](), [telnyx](), [trivy-attack]() ### AI overview Chainguard Libraries is free for Chainguard console users until June 30, 2026, with no paid commitment required. It rebuilds Python, Java, and JavaScript packages from verified source in isolated environments and excludes libraries that use install-time scripts, helping reduce malware and software supply-chain risk. ### Source excerpt Open source attacks are rising. Chainguard Libraries rebuilds packages from verified source to block malware--now free until June 30, 2026. ## Impact of SHA1-Hulud: The Second Coming on the Mintlify CLI DevFeed: [Impact of SHA1-Hulud: The Second Coming on the Mintlify CLI]() Original publisher: [Read original article]() Author: Han Wang Published: 2025-11-25T00:00:00Z Content type: news Language: en Sources: [Mintlify Blog]() Topics: [Command-line interface](), [npm](), [malicious packages](), [Security](), [pnpm](), [GitHub](), [Cloud]() Tags: [announcements](), [deprecated](), [malicious-packages](), [npm](), [pnpm](), [resolved](), [security](), [sha1-hulud](), [supply-chain](), [upgrade]() ### AI overview Mintlify reports that its CLI was briefly exposed to the SHA1-Hulud supply chain attack through compromised npm dependencies on November 24, 2025. The company says it resolved the issue within six hours, released CLI version 4.2.210, deprecated potentially affected versions, and provided remediation steps for users who installed or updated during the vulnerable window. ### Source excerpt The Mintlify CLI was briefly exposed to a supply chain attack. Learn what happened, who was affected, and what actions to take. Resolved in 6 hours. ## Phishing Campaign Leveraging the NPM Ecosystem DevFeed: [Phishing Campaign Leveraging the NPM Ecosystem]() Original publisher: [Read original article]() Author: Liran Tal Published: 2025-10-09T23:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [npm](), [npm packages](), [browser](), [Malware](), [Open Source]() Tags: [awareness](), [blog](), [browser](), [cdn](), [developer](), [devrel](), [malicious-packages](), [malware](), [npm](), [npm-packages](), [phishing](), [security](), [snyk](), [snyk-platform](), [supply-chain](), [supply-chain-security]() ### AI overview A phishing campaign abuses the npm ecosystem and the unpkg CDN to host and deliver JavaScript through crafted HTML business documents. More than 175 disposable packages redirect victims to credential-harvesting sites when opened in a browser, targeting over 135 organizations. ### Source excerpt A new phishing campaign weaponizes NPM and the unpkg CDN. Over 175 throwaway packages are used to host scripts that redirect users to credential-harvesting sites. The attack targets enterprise employees through the browser, not developers at install time. ## Mitigating malware in the npm ecosystem with Chainguard Libraries DevFeed: [Mitigating malware in the npm ecosystem with Chainguard Libraries]() Original publisher: [Read original article]() Published: 2025-10-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries](), [Malware](), [npm packages](), [npm](), [Security](), [GitHub](), [Open Source]() Tags: [chainguard](), [chainguard-ecosystem](), [chainguard-libraries](), [chainguard-libraries-for-javascript](), [javascript](), [malicious-packages](), [malware](), [npm](), [npm-malware](), [npm-package-attack](), [npm-packages](), [open-source](), [security](), [software-supply-chain]() ### AI overview The article presents research on using Chainguard Libraries for JavaScript to mitigate malware in the npm ecosystem. By requiring attributable source code and validating source-to-artifact integrity through a build-from-source pipeline, the study found that approximately 99% of 8,783 known malicious npm packages would have been prevented from publication, while approximately 99.7% were blocked for users relying on Chainguard Libraries as their sole source of npm dependencies. ### Source excerpt In a recent analysis, Chainguard Libraries for JavaScript prevented over 99% of malicious npm packages published to the npm registry. ## S1ngularity - What Happened, How We Responded, What We Learned DevFeed: [S1ngularity - What Happened, How We Responded, What We Learned]() Original publisher: [Read original article]() Author: Juri Strumpflohner Published: 2025-09-05T00:00:00Z Content type: article Language: en Sources: [Juri Strumpflohner]() Topics: [GitHub Actions](), [npm](), [malicious packages](), [Security](), [Exploit](), [incident](), [Command-line interface](), [Local AI](), [Claude]() Tags: [claude](), [cli](), [exploit](), [gemini](), [github](), [github-actions](), [incident](), [local-ai](), [malicious-packages](), [npm](), [nx](), [reporting](), [security](), [signing]() ### AI overview Nx describes how attackers exploited a GitHub Actions injection vulnerability to steal its npm publishing token and publish malicious Nx packages. The packages ran post-install scripts that searched for sensitive data and uploaded results to public GitHub repositories. The article also details containment, communication, investigation, and security hardening measures. ### Source excerpt Malicious Nx packages were published to npm via GitHub Actions exploit. Learn what happened and how we enhanced security measures. ## Malware-Resistant Python without the Guesswork DevFeed: [Malware-Resistant Python without the Guesswork]() Original publisher: [Read original article]() Published: 2025-08-01T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard libraries for python](), [chainguard libraries](), [Security](), [chainguard](), [Open Source](), [Malware]() Tags: [chainguard-libraries](), [chainguard-libraries-for-python](), [malicious-packages](), [malware](), [num2words](), [provenance](), [pypi](), [python](), [reproducibility](), [sbom](), [secure-packages](), [security](), [signing](), [slsa](), [supply-chain]() ### AI overview The article presents Chainguard Libraries for Python as a way to reduce malware and software supply chain risks in Python package consumption. It describes rebuilding packages from upstream source in an isolated, reproducible SLSA Level 2 environment, and publishing signed SBOMs and provenance information. ### Source excerpt The recent compromise of the num2words package never made it into Chainguard Libraries for Python. Get the breakdown from the team on our packages you can trust. ## The mysterious supply chain concern of string-width-cjs npm package DevFeed: [The mysterious supply chain concern of string-width-cjs npm package]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-10-03T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [npm](), [supply-chain-security](), [Security](), [Pull Request](), [Open Source]() Tags: [awareness](), [blog](), [code-security](), [dependencies](), [developer](), [devrel](), [javascript](), [malicious-packages](), [manifest](), [node-js](), [npm](), [open-source-security](), [pull-request](), [security](), [snyk](), [snyk-code](), [snyk-open-source](), [supply-chain](), [supply-chain-security]() ### AI overview The article explains how npm package aliasing works and how it can create supply-chain security risks. It describes a benign pull request that prompted an investigation using lockfile-lint, which uncovered suspicious package names and potential malicious look-alikes on the public npm registry. ### Source excerpt Npm package aliasing can be a security threat. Learn about how malicious actors can exploit this feature to introduce fake packages into your projects. Protect your projects with best practices and stay vigilant against supply chain attacks.