Supply Chain Attack

Flat white line-art of a row of package boxes feeding a pipeline of connected nodes beside a large key — Miasma npm and GitHub Actions supply-chain activity.

Supply Chain Attack

Researchers Disclose "Miasma" Supply-Chain Wave Across 20+ npm Packages and GitHub Actions

Another JavaScript-ecosystem supply-chain disclosure puts developer-secret rotation and GitHub Actions auditing back at the top of the defender to-do list — this time as a fresh wave of the ongoing Miasma cluster.

Flat white line-art of a marketplace storefront with a grid of skill tiles and an agent head outline — OpenClaw AI coding agent skill-marketplace risks.

Artificial Intelligence (AI)

Researchers Disclose "OpenClaw" Skill-Marketplace Risks for AI Coding Agents

AI-coding-agent skill marketplaces are an emerging supply-chain surface — defenders have inventory work this week.

Flat white line-art of a three-node build pipeline with a branch-and-merge fork feeding a repository box — Cordyceps CI/CD GitHub repository disclosure.

Supply Chain Attack

Researchers Disclose "Cordyceps" CI/CD Flaws Affecting 300+ GitHub Repositories

Supply-chain audit work for organizations using GitHub-hosted CI/CD: a research firm found a recurring pull-request handling and workflow-permission pattern that left 300-plus repositories open to attacker-controlled code execution.

Flat white line-art of a row of package boxes beside an attribution tag card and a flag pin — Microsoft Mastra npm Sapphire Sleet attribution.

Supply Chain Attack

Microsoft Attributes Mastra AI Supply Chain Compromise to Sapphire Sleet

Microsoft's attribution analysis ties the JavaScript-ecosystem compromise to a North-Korea-linked cluster, assessing with high confidence that the actor it tracks as Sapphire Sleet published poisoned Mastra packages to reach developers and crypto wallets.

Flat white line-art of an envelope, a key, and a plugin tile — Gravity SMTP WordPress plugin API-key exposure.

Vulnerabilities

Hackers Exploit Gravity SMTP WordPress Plugin Bug (CVE-2026-4020) to Expose API Keys

A WordPress plugin vulnerability requires API-key rotation work for affected site administrators, after researchers found an unauthenticated endpoint leaking live mail-provider credentials from roughly 100,000 installations.

Flat white line-art of a row of package boxes with one flagged tile beside a contributor key card — Mastra npm contributor-account compromise.

Supply Chain Attack

145 Mastra npm Packages Compromised via Hijacked Contributor Account

Another contributor-account compromise hits the JavaScript ecosystem — defenders using Mastra packages have inventory and rotation work this week.

Flat white line-art of a package box with a toggle switch flipped off above an install pipeline, on a Mulberry background — npm 12 install-script default change.

Supply Chain Attack

GitHub Announces NPM 12 Default-Behavior Change for Install Scripts

The default flips — npm 12 changes the install-script behavior that has driven years of supply-chain reform debate.

Flat white line-art of a sealed toolbox opening above a row of code repositories — Miasma toolkit open-sourced on GitHub.

Supply Chain Attack

Miasma Supply-Chain Worm Open-Sourced on GitHub

Miasma's open-sourcing turns the previous day's Microsoft-repo incident into the first instance of a much broader supply-chain threat any actor can now reproduce.

Flat white line-art of a code repository folder linked to two robot heads — Miasma worm targeting AI coding agents.

Supply Chain Attack

Microsoft Pulls 70+ GitHub Repos as Miasma Worm Targets AI Coding Agents

For the second time in weeks, Microsoft packages were laced with credential stealers — this time targeting users of AI coding agents, forcing the company to pull more than 70 of its own GitHub repositories.

Flat white line-art of a Python package box flagged and pulled from a shelf of registry crates — Hades PyPI package-poisoning incident.

Supply Chain Attack

PyPI Discloses "Hades" Package-Poisoning Incident; 19 Packages Removed

Another package-poisoning incident lands across a language registry, reinforcing the case for default-behavior reform that GitHub has now begun applying to npm.

Flat white line-art of a package, a browser, and a payment card in a row — trusted-channel abuse cluster.

Supply Chain Attack

Trusted Channels Turned Hostile: a Rust npm Worm, a Poisoned Browser, and Stripe Card Skimmers

Three disclosures this cycle share one thesis: attackers borrowing the trust of legitimate channels. A Rust-written npm worm (IronWorm), a cryptominer slipped into Hola Browser, and a Magecart skimmer hosted inside Stripe each hide in traffic defenders are inclined to allow.

Flat white line-art of a code-editor window where a click releases a key token toward a folder of private repositories.

Vulnerabilities

One Click in VS Code Steals Your GitHub Token — the Researcher Skipped Coordinated Disclosure

Researcher Ammar Askar disclosed a one-click attack via VS Code's GitHub.dev that steals a GitHub OAuth token with read-write access to private repos. He published the PoC with about an hour's notice, blaming Microsoft's disclosure process.

See all