Supply Chain Security
48 articles RSS
Bloom Security's SlugFest Research Says Over 1,500 npm Packages Were Open to Hijacking via Trusted Publishing; GitHub Now Expires Unvalidated Configs
Bloom Security says SlugFest let attackers claim freed GitHub slugs to publish to over 1,500 npm packages; GitHub now expires unvalidated trusted publishing configurations after 48 hours.
Malicious AUR Packages Impersonating yay and paru Run a Remote Script as Root, Raising a Fresh Alarm Over the Arch User Repository
An account named marchos1as uploaded typosquatted yay and paru lookalikes to the AUR; their install scriptlets ran a downloaded script as root before maintainers banned the account.
npm Trusted Publishing Configurations Now Expire After 48 Hours Unless Validated, and issue_comment Tokens Are Rejected
GitHub says unvalidated npm trusted publishing configurations now expire 48 hours after creation, and npm now rejects trusted publishing tokens from GitHub Actions issue_comment events.
Docker Says a Docker Hub Account-Conversion Flaw, CVE-2026-105445, Let Reassigned Personal Access Tokens Act as Other Users Until a September 30 Fix
Docker's advisory says account conversion reassigned personal access tokens to new owners from August 2024 until a September 30, 2026 fix; it reports no evidence of exploitation.
FINOS Says OSERA Is Operational With Six Premier Bank Members, a v0.1 Patch Standard and Fixes for 50-Plus Spring and Java Projects
FINOS says its bank-backed OSERA alliance is operational, with six Premier members, a first patching standard and patches for 50-plus Spring and Java projects.
StepSecurity Says GhostAction Pushed Credential-Stealing Workflows to 345 Repositories via Two Hijacked Maintainer Accounts on October 8
StepSecurity says two hijacked maintainer accounts, including Uber athenadriver's author, pushed a credential-stealing workflow to 345 repositories on October 8; Socket counts 500+ accounts.
Checkmarx and CloudSEK Detail MALFEX, an npm Campaign With Eight Malicious Packages and 40,767 Downloads, Three of Them Still Live
Researchers say a lone operator published 12 npm packages since August 2023, eight malicious; Checkmarx found three still installable on September 29 with incomplete advisory coverage.
Tensorlake npm Package Compromised With a Shai-Hulud Worm That Targets AI Tool Configs and Wipes Home Directories If Stolen Tokens Are Revoked
StepSecurity and Socket report that tensorlake@0.5.144 on npm steals credentials and AI-tool configs, and installs a monitor that deletes files if a stolen GitHub token is revoked.
Socket Links Two Malicious VS Code Themes With Thousands of Installs to the GlassWorm Campaign
Socket reports two malicious VS Code themes in a GlassWorm-linked cluster, one hiding a Windows downloader and one a Solana-resolving loader, months after a coordinated takedown.
Truffle Security Finds 543,699 Credentials Still Valid in Public GitHub Repositories, With a Median Exposure of 784 Days
A scan of 224 million public repositories found 543,699 working credentials; GitHub push protection cut protected-type leaks by 53 percent but 51.8 percent of live secrets fall outside it.
Two GitHub Actions Disabled Since May's Mini Shai-Hulud Compromise Came Back Online in September, Reactivating Malware With No New Attack
Socket found that actions-cool/issues-helper and actions-cool/maintain-one-comment, disabled since May 2026, became reachable again on September 16 with their malicious tags intact, silently re-running the payload.
Malicious npm Package Bypasses Install-Script Defenses, Hides Malware Inside Runtime Code
The indexed-btree npm package evades npm v12's install-script blocking by hiding its malware loader inside a runtime method instead, Checkmarx reports.