# package malware

Published articles for package malware.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Attacks rewritten: Where malware enters the build

DevFeed: [Attacks rewritten: Where malware enters the build](<https://devfeed.tech/articles/attacks-rewritten-where-malware-enters-the-build-12892.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/attacks-rewritten-where-malware-enters-the-build>)

Published: 2026-04-07T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [malware](<https://devfeed.tech/tags/malware.md>), [package-malware](<https://devfeed.tech/tags/package-malware.md>), [security](<https://devfeed.tech/tags/security.md>), [sha1-hulud](<https://devfeed.tech/tags/sha1-hulud.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [solarwinds](<https://devfeed.tech/tags/solarwinds.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>), [teampcp](<https://devfeed.tech/tags/teampcp.md>)

### AI overview

This article explains how modern software supply chain attacks can affect production deployments, CI/CD clusters, developer workstations, and other systems. It describes the shift from exploiting known production vulnerabilities to injecting malicious code upstream through compromised maintainer accounts, package managers, and binary dependencies.

### Source excerpt

Modern supply chain attacks target CI, dev machines, and dependencies. Learn how building from source helps prevent malware and reduce risk.