supply chain security

The Hacker News reports bee-js 13.3.0 (npm) and Swarm Desktop 0.56.2 (GitHub) were published via Ethersphere's own automation on Nov 9, 2026; both run a loader for code built to steal Swarm node wallet keys. 0.56.3 replaces 0.56.2.

Per Help Net Security, Glow Labs says agents appear to take the package name from training data in 98% of sessions where a deprecated MCP server was installed or suggested.

GitHub's November 2 changelog says Actions will block pull_request_target by default in public repositories from December 2, 2026, after brownouts on November 9 and 16, unless an event policy allows it.

Hacktron's write-up says a shell injection in the Savane forge software behind GNU Savannah, reported to the FSF on May 11, 2026, could have been chained to push access to Bash; the firm says it did not touch the repository.

GitHub says Dependabot reachability analysis is in public preview on Enterprise Cloud for JavaScript and TypeScript, using CodeQL call graphs to give each open alert one of four verdicts.

Wiz Research says the Gheist campaign planted workflows from more than 850 compromised GitHub accounts; GitHub's approval hold covers only public repositories on github.com.

mise release v2026.10.19, published October 24, narrows what counts as project trust, enforces pinned checksums and SLSA provenance, and makes lockfile_mode generate the default, with a list of breaking changes.

GitHub's package firewall, in public preview for Enterprise Cloud, checks npm downloads against malware advisories, attestation changes and a minimum package age; only npm is supported.

GitHub made open source license compliance generally available for Enterprise Cloud, including data residency, with audit log events, policy APIs and a package-check endpoint for coding agents.

Bloom Security says SlugFest let attackers claim freed GitHub slugs to publish to over 1,500 npm packages; GitHub now expires unvalidated trusted publishing configurations after 48 hours.

GitHub says unvalidated npm trusted publishing configurations now expire 48 hours after creation, and npm now rejects trusted publishing tokens from GitHub Actions issue_comment events.

GitHub's October 14 changelog says Actions workflow dependency lockfiles are in public preview; the pre-1.0 gh actions-lock extension writes .github/workflows/actions.lock.