Unpinned MCP server launches can expose API keys, Corelight finds
Of 35 servers reviewed, 23 recommended installs pulled fresh registry dependencies; pinning the main package did not lock the rest.
Stories per day · 30 days
2 RSS
Relatedsupply-chain23github9claude-code5infostealer5prompt-injection5malfex4coding-agents3cpanel3ethereum3pypi3agents-md2clickfix2codex2credential-theft2north-korea2oidc2openai-codex2open-source2
88 stories, newest first · one card per story
Stories tagged #npm
Lazarus and DeceptiveDevelopment target drones and software supply chains
ESET says April–September 2026 activity used fake job offers, then spread malware through stolen developer accounts and public packages.
Hugging Face exec warns attacks may force open AI platforms to tighten access
Solaiman cited OpenCode API-key theft, an agent swarm on Hugging Face, and a Fireworks customer-data incident.
1
Malicious bee-js and Swarm Desktop releases steal node wallet keys
Stolen CI credentials published bee-js 13.3.0 and Swarm Desktop 0.56.2; both were withdrawn, and 0.56.3 is a clean rebuild.
Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain
PolinRider loaders use a fixed Ethereum wallet to dynamically fetch payloads via dead drop, bypassing install hooks.
DeceptiveDevelopment poisons repos after stealing developer credentials
ESET says the group planted code on npm, PyPI, Packagist, Go modules, and extension stores from April to September 2026.
1
GitHub previews npm firewall that blocks packages at install
Enterprise Cloud customers can enforce malware advisories, severity, attestations, new install scripts and a package-age cooldown.
GitHub npm package firewall can block new versions before install
Enterprises can set a cooldown, alongside AI Scan, Copilot checks, and Dependabot reachability ranking.
Malware planted in 42 GitHub repos targets Claude, Gemini and Cursor
Hooks in .github/init.js run at session start; JFrog links the traps to the testmetest npm campaign.
testmetest npm campaign hijacks 42 GitHub repositories to steal credentials
JFrog links the worm to hidden CI publishers on short-lived branches; disabling install scripts does not stop a newer import-triggered path.
Attackers hit 42 GitHub repos with files too large to search
Oversized wrappers and a native addon hid one CI-publisher payload while an npm worm stole tokens and spread through Actions.
SBOMs missed scope of a Shai-Hulud supply-chain compromise
A stale SBOM called a SaaS environment clean while a hidden transitive dependency had already run.
1
Miasma npm worm armed 42 GitHub repositories, JFrog says
Oversized blobs hid credential theft and a token-revocation wiper on real developer accounts, not only test repos.
2
Malicious Downloads files can hijack Codex and Claude Code
Forever Security says a planted AGENTS.md or CLAUDE.md can change agent settings, install an npm package, or expose an OAuth token.
3
Downloads-folder instruction files steer Codex and Claude Code
In Forever Security tests, Codex followed the planted file in more than 90% of attempts and Claude exposed a login token about half the time.
1
Planted Downloads files can hijack Claude Code and Codex agents
Forever Security says a planted AGENTS.md made Codex install MALFEX package function-color in over 90 percent of tests.
1
Downloads-folder instruction file tried to make a coding agent install malware
Forever stopped the agent before code ran; Codex followed the planted file in more than 90% of isolated tests.
1
Malicious AGENTS.md files in Downloads hijack Codex and Claude Code
A customer agent tried to install npm package function-color; tests also stole Claude Code OAuth tokens in about half of runs.
2
Exaforce says GitHub token theft and vishing drain data in minutes
A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.
1
Paper: building from source stops most npm and PyPI malware
A source check blocked 87.7 to 99.9 percent of 47,066 malicious packages, depending on how strictly the source was vetted.
Wiz pipeline flags malicious npm packages before a CVE exists
Wiz says notable supply-chain attacks rose from about 10% of significant incidents in late 2025 to 1 in 4.
1
Fake Apex Accelerator npm packages spread stealers and backdoors
@apexacc/cli and @apexacc/audit promised AI credits and audits but delivered Windows and macOS malware instead.
2
Roundup cites infostealers, malicious packages and ClickFix as rising malware trends
Immersive says Lumma Stealer, StealC and RisePro now account for 75% of stolen credentials sold for initial access.
2
Ledger implant linked to $93M theft; npm flaw hit 1,500 packages
The roundup also covers an exploited Windows Shell flaw and an Ivanti Connect Secure zero-day chain.