SafeDep continuously scans packages published in npm, PyPI, RubyGems, and more for malicious code, protecting software development teams at different stages of the software supply chain.https://safedep.iohttps://safedep.io/asyncapi-generator-supply-chain-attack-miasma-rathttps://safedep.io/asyncapi-generator-supply-chain-attack-miasma-ratFour @asyncapi npm packages were published with obfuscated malware on July 14, 2026 via compromised CI workflows. The payload downloads Miasma RAT, a credential stealer targeting browsers, SSH keys, npm tokens, and crypto wallets. @asyncapi/specs alone has 2.7M weekly downloads.Tue, 14 Jul 2026 00:00:00 GMThttps://safedep.io/jscrambler-npm-supply-chain-compromisehttps://safedep.io/jscrambler-npm-supply-chain-compromiseThe official jscrambler npm package (60K monthly downloads) was trojanized starting at 8.14.0 through an npm account or CI compromise. The attacker republished the same Rust infostealer across five releases in three hours, including 19 minutes after a clean remediation release, and pivoted from a preinstall hook to running the dropper from the module code itself to slip past install-script scanners.Sat, 11 Jul 2026 00:00:00 GMThttps://safedep.io/malicious-nodemon-sudo-tslint-conf-npm-backdoorhttps://safedep.io/malicious-nodemon-sudo-tslint-conf-npm-backdoornodemon-sudo copies the real nodemon byte for byte, adds nothing malicious to its own code, and injects one extra dependency, tslint-conf, a repackaged pino logger carrying a backdoor. There is no install hook. The payload fires only at runtime, one dependency hop away from the package a developer installed.Thu, 09 Jul 2026 10:00:00 GMThttps://safedep.io/marketfront-dependency-confusion-campaignhttps://safedep.io/marketfront-dependency-confusion-campaignOn July 1, 2026, npm user marketfront batch-published 25 packages carrying the same README lure SafeDep has tracked across four earlier accounts (mr.4nd3r50n, pik-libs, t-in-one, emcd-vue): "Internal package — Platform Engineering Team". The marker is a reusable dependency-confusion template. It stayed constant across every wave while the payload behind it evolved from a process.env beacon into a credential-file harvester with an RC4-hidden C2.Thu, 02 Jul 2026 00:00:00 GMThttps://safedep.io/defi-infostealer-fake-arbitrage-bot-npmhttps://safedep.io/defi-infostealer-fake-arbitrage-bot-npmA GitHub repository posing as a Polymarket arbitrage bot accumulated 53 forks before anyone flagged the malicious npm package buried in its dependencies. Behind that repo: ten coordinated npm accounts, 30 packages, and four delivery techniques including one that uses npm itself as the payload server. The second-stage credential harvester reads crypto wallets, browser credentials, AWS keys, SSH keys, and password managers.Tue, 30 Jun 2026 12:00:00 GMThttps://safedep.io/miasma-worm-hits-leoplatform-20-npm-packageshttps://safedep.io/miasma-worm-hits-leoplatform-20-npm-packagesA Miasma worm variant compromised a single maintainer account and used it to publish infected versions of 20 LeoPlatform npm packages within a 3-second window. The worm also pushed weaponized GitHub Actions workflows to at least three repos. The payload is the same Bun-based credential stealer and self-propagating worm documented in our Miasma source code analysis.Thu, 25 Jun 2026 10:00:00 GMThttps://safedep.io/wshu-net-npm-credential-stealer-campaignhttps://safedep.io/wshu-net-npm-credential-stealer-campaignOne actor seeded 15 npm packages across 13 throwaway scopes in a single morning, each shipping a ~270KB obfuscated downloader behind a postinstall hook. The downloader pulls a Rust infostealer from GitHub Releases that drains crypto wallets, browser credentials, cloud tokens, and SSH keys. Amazon Inspector tracks the same cluster as Operation Friday Harvest.Tue, 23 Jun 2026 12:00:00 GMThttps://safedep.io/malicious-apintergrationpost-npm-myra-rathttps://safedep.io/malicious-apintergrationpost-npm-myra-ratThe npm package apintergrationpost is a red team RAT called MYRA with native C rootkit, triple persistence, fileless execution, live screen streaming, and process masquerade. This analysis documents its full capability set so defenders can detect and respond if it is misused.Sun, 21 Jun 2026 18:00:00 GMThttps://safedep.io/withgoogle-stitch-sdk-scope-squat-credential-harvesterhttps://safedep.io/withgoogle-stitch-sdk-scope-squat-credential-harvesterA malicious npm package squats the @withgoogle scope to impersonate Google Stitch, silently harvesting credentials from Claude Code, git, GitHub CLI, SSH keys, npm, and Docker on install.Sat, 20 Jun 2026 12:00:00 GMThttps://safedep.io/procwire-npm-windows-dropper-campaignhttps://safedep.io/procwire-npm-windows-dropper-campaignFive npm packages published in a 12-minute burst split a Windows binary dropper across a fake utility toolkit. The loader hides in a preinstall hook, decodes its C2 from a helper package, and fetches a payload from catbox.moe.Wed, 17 Jun 2026 16:00:00 GMThttps://safedep.io/mastra-npm-scope-takeover-supply-chain-attackhttps://safedep.io/mastra-npm-scope-takeover-supply-chain-attackAn attacker republished 143 @mastra packages, including @mastra/core, each with one injected dependency: easy-day-js, a dayjs clone whose install hook downloads and runs a remote access trojan.Wed, 17 Jun 2026 12:00:00 GMThttps://safedep.io/astro-config-blockchain-c2-supply-chainhttps://safedep.io/astro-config-blockchain-c2-supply-chainAn obfuscated IIFE hidden in astro.config.mjs fires at every build, beacons an HTTP C2, and pulls staged commands from a Tron-to-BSC blockchain dead drop.Fri, 12 Jun 2026 00:00:00 GMThttps://safedep.io/miasma-worm-still-infected-github-reposhttps://safedep.io/miasma-worm-still-infected-github-reposEight days after the Miasma worm forged a credential stealer into public GitHub repositories, most are still serving it. A re-scan of the published victim list plus a fresh code-search sweep found 123 repos across 56 accounts still carrying the live 4.3 MB payload on 665 branches. The big names cleaned up. The long tail did not.Thu, 11 Jun 2026 10:00:00 GMThttps://safedep.io/inside-the-miasma-supply-chain-attack-toolkithttps://safedep.io/inside-the-miasma-supply-chain-attack-toolkitThe Miasma worm source code appeared on GitHub through compromised developer accounts. The codebase is a full supply chain attack toolkit with credential exfiltration across AWS, Azure, GCP, and Kubernetes, registry infection for npm, PyPI, and RubyGems via stolen tokens and OIDC trusted publishing, GitHub Actions tag hijacking, AI coding tool config poisoning, and a GitHub commit search based C2 infrastructure.Tue, 09 Jun 2026 10:00:00 GMThttps://safedep.io/config-files-that-run-codehttps://safedep.io/config-files-that-run-codeEditor and package-manager config files auto-execute commands when a developer opens a folder or installs dependencies. The Miasma worm wired one dropper into seven of them across Claude Code, Gemini, Cursor, VS Code, npm, Composer, and Bundler. Opening a cloned repo is no longer safe.Sat, 06 Jun 2026 10:00:00 GMThttps://safedep.io/miasma-worm-ai-coding-agent-config-injectionhttps://safedep.io/miasma-worm-ai-coding-agent-config-injectionA Miasma worm variant injects a 4.3 MB dropper into GitHub repos across multiple maintainers, wiring it to auto-run through Claude Code, Gemini, Cursor, and VS Code config files. No npm package is published. The trigger is cloning a repo and opening it in an AI coding agent, a shift from the campaign's earlier node-gyp install-time execution.Fri, 05 Jun 2026 10:00:00 GMThttps://safedep.io/malicious-faster-axios-npm-epsilon-stealerhttps://safedep.io/malicious-faster-axios-npm-epsilon-stealerTwo axios typosquats on npm, turbo-axios and faster-axios, form a campaign delivering Epsilon Stealer through a four-stage chain. The Electron infostealer grabs browser credentials, crypto wallets, Discord tokens, and opens a persistent WebSocket RAT.Tue, 02 Jun 2026 12:00:00 GMThttps://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-wormhttps://safedep.io/redhat-cloud-services-hit-by-mini-shai-hulud-npm-wormThe attacker compromised the @redhat-cloud-services GitHub Actions OIDC trusted publisher to ship patch-client@4.0.4 with a Mini Shai-Hulud worm. The same publisher controls 32 packages across the scope. The payload harvests cloud, CI, and registry credentials and self-propagates through stolen tokens.Mon, 01 Jun 2026 12:37:00 GMThttps://safedep.io/microsoftsystem64-binary-payload-analysishttps://safedep.io/microsoftsystem64-binary-payload-analysisDeep technical analysis of MicrosoftSystem64, an 81 MB Node.js SEA binary deployed via malicious npm packages. This RAT steals browser credentials, 80+ crypto wallet extensions, Telegram sessions, SSH keys, and screenshots, exfiltrating everything to HuggingFace datasets while maintaining persistence across Windows, macOS, and Linux.Thu, 28 May 2026 12:00:00 GMThttps://safedep.io/oob-moika-tech-dependency-confusion-campaignhttps://safedep.io/oob-moika-tech-dependency-confusion-campaignTwo npm accounts published 164 malicious packages at version 99.99.99 targeting a cloud platform and a financial institution. Both campaigns share identical payload code, the same C2 endpoint, and the same hardcoded secret — strong evidence of a single actor. Updated June 1 with a fourth account (emcd-vue, 3+ packages) impersonating the EMCD crypto exchange, now with WaCk/JScrambler obfuscation, home-directory persistence, and a FUSION_ second-stage protocol.Thu, 28 May 2026 00:00:00 GMThttps://safedep.io/malicious-npm-terminal3airport-proxy-adware-spamhttps://safedep.io/malicious-npm-terminal3airport-proxy-adware-spamnpm account terminal3airport published 141 packages containing a web proxy unblocker disguised as tutoring websites. The packages load popunder ads, external monetization scripts, and Google Analytics tracking, using npm as free static file hosting. An auto-publish shell script automates the spam at scale.Wed, 27 May 2026 00:00:00 GMThttps://safedep.io/malicious-forge-jsxy-npm-rat-evolutionhttps://safedep.io/malicious-forge-jsxy-npm-rat-evolutionforge-jsxy picked up where the taken-down forge-jsx left off, publishing 22 versions over 22 days. Each release added new capabilities: crypto wallet scanning, Chromium extension theft, WebRTC data channels, and relay-driven auto-upgrades. This post traces that evolution version by version.Tue, 26 May 2026 18:00:00 GMThttps://safedep.io/megalodon-mass-github-repo-backdooring-ci-workflowshttps://safedep.io/megalodon-mass-github-repo-backdooring-ci-workflowsOver 5,700 malicious commits were pushed to GitHub repositories on May 18, 2026, replacing GitHub Actions workflows with base64-encoded secret exfiltration payloads. The "megalodon" campaign targeted repos including Tiledesk (9 repos), Black-Iron-Project (8 repos), and hundreds of others. @tiledesk/tiledesk-server versions 2.18.6-2.18.12 on npm carry the backdoor. C2: 216.126.225.129:8443.Thu, 21 May 2026 16:06:00 GMThttps://safedep.io/malicious-polymarket-npm-crypto-wallet-drainerhttps://safedep.io/malicious-polymarket-npm-crypto-wallet-drainerNine coordinated npm packages target Polymarket traders with a social-engineered postinstall prompt that exfiltrates raw private keys to a Cloudflare Worker. The attacker published all packages within 30 seconds from a throwaway account.Thu, 21 May 2026 03:21:00 GMThttps://safedep.io/art-template-npm-supply-chain-compromisehttps://safedep.io/art-template-npm-supply-chain-compromiseart-template versions 4.13.3 through 4.13.7 were compromised after the original author was tricked into transferring ownership through an acquisition fraud. The browser bundle injects scripts that previously delivered the Coruna iOS exploit kit and now redirect visitors to Chinese gambling portals.Wed, 20 May 2026 19:00:00 GMThttps://safedep.io/malicious-durabletask-pypi-supply-chain-attackhttps://safedep.io/malicious-durabletask-pypi-supply-chain-attackThree compromised versions of the Microsoft durabletask Python SDK (1.4.1, 1.4.2, 1.4.3) were published to PyPI, each downloading a stage-2 payload that steals credentials from AWS, Azure, GCP, Kubernetes, HashiCorp Vault, and password managers, then propagates to other hosts via SSM and kubectl exec.Wed, 20 May 2026 00:00:00 GMThttps://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromisedhttps://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromisedA compromised npm maintainer account published 637 malicious versions across 317 packages including size-sensor, echarts-for-react, timeago.js, and hundreds of @antv scoped packages, affecting 15M+ monthly downloads.Tue, 19 May 2026 18:30:00 GMThttps://safedep.io/malicious-node-ipc-npm-compromisehttps://safedep.io/malicious-node-ipc-npm-compromiseAnalysis of compromised node-ipc versions 9.1.6, 9.2.3, and 12.0.1 on npm: a maintainer account takeover injects an 80KB obfuscated credential stealer that targets 100+ sensitive files (SSH keys, cloud credentials, environment variables, AI tool configs) and exfiltrates them via DNS tunneling to a C2 server masquerading as Azure infrastructure.Thu, 14 May 2026 16:56:04 GMThttps://safedep.io/malicious-npm-packages-claude-code-hookshttps://safedep.io/malicious-npm-packages-claude-code-hooksFive typosquatting npm packages ship a hidden ELF binary that fires on install and re-runs via Claude Code's SessionStart hook on every developer session. C2 is 207.90.194.2:443.Wed, 13 May 2026 12:00:00 GMThttps://safedep.io/tanstack-github-actions-cache-poisoninghttps://safedep.io/tanstack-github-actions-cache-poisoningA GitHub user opened a PR against TanStack Router from a fork, poisoned the shared pnpm cache through a pull_request_target workflow, then force-pushed the branch clean. When the release pipeline restored the poisoned cache, the payload executed. Full attack chain analysis with timeline, IOCs, and remediation.Wed, 13 May 2026 00:00:00 GMThttps://safedep.io/mass-npm-supply-chain-attack-tanstack-mistralhttps://safedep.io/mass-npm-supply-chain-attack-tanstack-mistralOver 400 compromised npm package versions and at least 2 PyPI packages published in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath, OpenSearch, guardrails-ai, and dozens of other packages.Tue, 12 May 2026 06:00:00 GMThttps://safedep.io/endpoint-protection-developer-securityhttps://safedep.io/endpoint-protection-developer-securityPMG blocks malicious package installs before post-install scripts run. Sync with SafeDep Cloud for fleet-wide visibility across your team's endpoints and CI runners.Mon, 11 May 2026 00:00:00 GMThttps://safedep.io/malicious-noon-contracts-npm-defi-rathttps://safedep.io/malicious-noon-contracts-npm-defi-ratnoon-contracts poses as a Noon Protocol SDK on npm. On install it exfiltrates SSH keys, crypto wallet private keys, AWS credentials (including live STS/S3/SecretsManager calls), Kubernetes secrets, .env files, shell history, and browser wallet paths to C2 at 82.221.101.203:8443. A full eval-based remote shell polls every 45 seconds. Triple persistence via crontab, macOS LaunchAgent, Linux systemd, and shell RC injection.Sun, 10 May 2026 17:00:00 GMThttps://safedep.io/malicious-martinez-polygon-clipping-tony-npm-telegram-rathttps://safedep.io/malicious-martinez-polygon-clipping-tony-npm-telegram-ratmartinez-polygon-clipping-tony is a trojanized fork of the legitimate martinez-polygon-clipping npm package. The postinstall hook downloads a PyInstaller-packed Telegram bot from 172.86.73.132 that provides full remote shell, screenshot capture, file upload/download, and self-destruct capabilities on Windows targets.Thu, 07 May 2026 18:00:00 GMThttps://safedep.io/malicious-npm-node-env-resolve-rathttps://safedep.io/malicious-npm-node-env-resolve-ratnode-env-resolve is a malicious npm package that installs a full-featured remote access trojan on developer machines. The RAT streams screens, captures audio, steals browser history, and gives full mouse and keyboard control to a remote operator. The toolkit matches the OtterCookie RAT family linked to North Korea's Contagious Interview campaign.Sun, 03 May 2026 10:00:00 GMThttps://safedep.io/malicious-common-tg-service-npm-telegram-hijacking-frameworkhttps://safedep.io/malicious-common-tg-service-npm-telegram-hijacking-frameworkcommon-tg-service ships 502 npm versions of a Telegram account-takeover framework with hardcoded 2FA credentials, IMAP-based code harvesting, and forced session eviction. Its companion package ams-ssk is the server-side runtime.Fri, 01 May 2026 12:00:00 GMThttps://safedep.io/malicious-exiouss-npm-exam-cheating-toolhttps://safedep.io/malicious-exiouss-npm-exam-cheating-toolexiouss on npm is the latest package from the loltestpad campaign — the same attacker who published the ixpresso-core Windows RAT in April. It bundles a dormant ChatGPT cookie stealer alongside an AI exam cheating tool, targeting students who willingly run it.Fri, 01 May 2026 00:00:00 GMThttps://safedep.io/malicious-pytorch-lightning-pypi-compromisehttps://safedep.io/malicious-pytorch-lightning-pypi-compromisePyPI yanked PyTorch Lightning versions 2.6.2 and 2.6.3 after both embedded a two-stage credential-stealing payload. Any import of the library spawns an 11MB obfuscated JavaScript worm identical to the Shai-Hulud payload seen in the April 29 SAP npm campaign.Thu, 30 Apr 2026 12:00:00 GMThttps://safedep.io/mini-shai-hulud-and-sap-compromisehttps://safedep.io/mini-shai-hulud-and-sap-compromiseFour SAP npm packages published on April 29, 2026 contain a two-stage credential-stealing payload targeting GitHub tokens, AWS keys, and CI/CD pipelines. The packages share SAP-affiliated maintainers, pointing to a publisher account compromise.Wed, 29 Apr 2026 14:00:00 GMThttps://safedep.io/redeem-onchain-sdk-polymarket-npm-malwarehttps://safedep.io/redeem-onchain-sdk-polymarket-npm-malwareredeem-onchain-sdk impersonates a Polymarket helper SDK and exfiltrates SSH keys, AWS credentials, npm tokens, Docker configs, Chrome saved logins, and a month of local git history to an AWS-hosted C2. The payload was shipped dormant for nearly a month, then weaponized with a postinstall hook in four rapid republishes on April 29, 2026.Wed, 29 Apr 2026 13:00:00 GMThttps://safedep.io/npm-global-util-malicious-package-analysishttps://safedep.io/npm-global-util-malicious-package-analysisnpm-global-util is a malicious npm package by maintainer raya4321 that exfiltrates credentials and system recon data via a preinstall hook. Part of a 16-package campaign targeting Apple developer CI/CD environments, with a second-stage that attempts to poison apple-app-store-server-library.Wed, 29 Apr 2026 10:00:00 GMThttps://safedep.io/bitwarden-cli-supply-chain-compromisehttps://safedep.io/bitwarden-cli-supply-chain-compromiseA technical writeup of the malicious `@bitwarden/cli@2026.4.0` release linked to the Checkmarx campaign. Covers the poisoned publish path, loader changes, credential theft, GitHub abuse, and responder takeaways.Fri, 24 Apr 2026 00:00:00 GMThttps://safedep.io/malicious-pull-requests-threat-modelhttps://safedep.io/malicious-pull-requests-threat-modelA compact threat model of the malicious pull request as a supply chain attack primitive against GitHub Actions: attacker, goals, assets, controllable surface, and an attack vector taxonomy (V1 through V8).Wed, 22 Apr 2026 00:00:00 GMThttps://safedep.io/malicious-ixpresso-core-npm-rathttps://safedep.io/malicious-ixpresso-core-npm-ratixpresso-core poses as an AI WhatsApp agent on npm but installs Veltrix, a Windows RAT that steals browser credentials, Discord tokens, and keystrokes via a hardcoded Discord webhook.Thu, 16 Apr 2026 00:00:00 GMThttps://safedep.io/pmg-dependency-cooldownhttps://safedep.io/pmg-dependency-cooldownPackage Manager Guard (PMG) blocks malicious installs and now supports dependency cooldown, a configurable window that hides brand-new npm versions during resolution so installs prefer older, already-visible releases.Thu, 16 Apr 2026 00:00:00 GMThttps://safedep.io/malicious-forge-jsx-npm-rathttps://safedep.io/malicious-forge-jsx-npm-ratforge-jsx poses as an Autodesk Forge SDK on npm. On install it deploys a system-wide keylogger, recursive .env file scanner, shell history exfiltrator, and a WebSocket-based remote filesystem backdoor to C2 at 204.10.194.247, with persistence via systemd, LaunchAgent, and Task Scheduler.Wed, 15 Apr 2026 17:36:35 GMThttps://safedep.io/malicious-js-logger-pack-npm-stealerhttps://safedep.io/malicious-js-logger-pack-npm-stealerjs-logger-pack spent three weeks on npm evolving from a probe into a full infostealer and then a binary dropper. Early versions installed an SSH backdoor, hijacked Telegram sessions, drained 27 crypto wallets, and deployed a cross-platform keylogger. After disclosure on April 15, the attacker pivoted to a HuggingFace-hosted binary dropper named MicrosoftSystem64, now at v1.1.26 with 29 total releases.Wed, 15 Apr 2026 12:00:00 GMThttps://safedep.io/malicious-dom-utils-lite-npm-ssh-backdoorhttps://safedep.io/malicious-dom-utils-lite-npm-ssh-backdoordom-utils-lite and centralogger on npm inject attacker SSH keys into ~/.ssh/authorized_keys and exfiltrate server metadata to Supabase-hosted C2 infrastructure, granting persistent remote access.Tue, 14 Apr 2026 12:00:00 GMThttps://safedep.io/malicious-genoma-ui-npm-dependency-confusion-campaignhttps://safedep.io/malicious-genoma-ui-npm-dependency-confusion-campaignA dependency confusion campaign by npm user victim59 targets at least three organizations through scoped packages @genoma-ui/components, @needl-ai/common, and rrweb-v1. The packages use install hooks to beacon system reconnaissance data to a DigitalOcean C2 server.Fri, 10 Apr 2026 07:15:00 GMThttps://safedep.io/malicious-sjs-biginteger-npm-ssh-thefthttps://safedep.io/malicious-sjs-biginteger-npm-ssh-theftThree waves of big.js typosquats (sjs-biginteger, bjs-biginteger, cjs-biginteger) from throwaway npm accounts implant SSH backdoors and exfiltrate credentials to Cloudflare-disguised C2 infrastructure.Thu, 09 Apr 2026 12:00:00 GMThttps://safedep.io/malicious-fairwords-npm-credential-wormhttps://safedep.io/malicious-fairwords-npm-credential-wormThree @fairwords npm packages were compromised with a self-propagating worm that harvests credentials, crypto wallets, Chrome passwords, and spreads to other packages using stolen npm tokens.Wed, 08 Apr 2026 03:30:00 GMThttps://safedep.io/malicious-velora-dex-sdk-npm-compromised-rathttps://safedep.io/malicious-velora-dex-sdk-npm-compromised-ratVersion 9.4.1 of @velora-dex/sdk, a DeFi SDK with ~2,000 weekly downloads, was compromised to deliver a Go-based remote access trojan (minirat) targeting macOS developers.Wed, 08 Apr 2026 01:53:01 GMThttps://safedep.io/malicious-hermes-px-pypi-ai-conversation-stealerhttps://safedep.io/malicious-hermes-px-pypi-ai-conversation-stealerhermes-px on PyPI steals AI conversations via triple-encrypted exfiltration to Supabase, routing through a hijacked university endpoint while injecting a stolen 245KB system prompt.Mon, 06 Apr 2026 00:00:00 GMThttps://safedep.io/prt-scan-github-actions-exfiltration-campaignhttps://safedep.io/prt-scan-github-actions-exfiltration-campaignA throwaway GitHub account submitted 219+ malicious pull requests in a single day, each carrying a 352-line payload that steals CI secrets, injects workflows, bypasses label gates, and scans /proc for credentials. Five payload variants target GitHub Actions, npm, and Python ecosystems. First public disclosure.Fri, 03 Apr 2026 18:30:00 GMThttps://safedep.io/malicious-npm-strapi-plugin-events-c2-agenthttps://safedep.io/malicious-npm-strapi-plugin-events-c2-agentA coordinated campaign of thirty-six malicious npm packages published by four sock-puppet accounts (umarbek1233, kekylf12, tikeqemif26, and umar_bektembiev1) targets Strapi CMS deployments with eight distinct payloads evolving from Redis RCE exploitation and Docker container escape through direct PostgreSQL database theft with hardcoded credentials to fileless reverse shells targeting a cryptocurrency payment platform's Jenkins CI pipeline. Fri, 03 Apr 2026 12:00:00 GMThttps://safedep.io/malicious-npm-mgc-compromised-rathttps://safedep.io/malicious-npm-mgc-compromised-ratThe npm package mgc was compromised via account takeover, with four malicious versions published in rapid succession deploying a full Remote Access Trojan targeting macOS, Windows, and Linux.Fri, 03 Apr 2026 00:00:00 GMThttps://safedep.io/malicious-npm-package-express-session-jshttps://safedep.io/malicious-npm-package-express-session-jsA malicious npm package typosquatting express-session fetches and executes a full Remote Access Trojan from a paste service, targeting browser credentials, crypto wallets, SSH keys, and more.Thu, 02 Apr 2026 00:00:00 GMThttps://safedep.io/axios-npm-supply-chain-compromisehttps://safedep.io/axios-npm-supply-chain-compromiseaxios 1.14.1 was published to npm via a compromised maintainer account, injecting a trojanized dependency that executes a multi-platform reverse shell on install. No source code changes in axios itself, just a new entry in package.json.Tue, 31 Mar 2026 02:26:00 GMThttps://safedep.io/malicious-telnyx-pypi-compromisehttps://safedep.io/malicious-telnyx-pypi-compromiseAnalysis of malicious telnyx 4.87.1 and 4.87.2 on PyPI — a package with over 1 million monthly downloads: injected code uses WAV audio steganography to deliver payloads that steal credentials and establish persistence. Attributed to TeamPCP.Fri, 27 Mar 2026 00:00:00 GMThttps://safedep.io/malicious-litellm-1-82-8-analysishttps://safedep.io/malicious-litellm-1-82-8-analysisAnalysis of compromised litellm 1.82.8 on PyPI: a .pth file triggers credential theft, AWS/K8s secret exfiltration, and persistent C2 backdoor on install.Tue, 24 Mar 2026 00:00:00 GMThttps://safedep.io/sl4x0-dependency-confusion-campaignhttps://safedep.io/sl4x0-dependency-confusion-campaignA sustained dependency confusion campaign by the sl4x0 actor likely targets 20+ organizations including Adobe, Ford, Sony, and Coca-Cola with 92+ malicious npm packages exfiltrating developer data via DNS.Tue, 24 Mar 2026 00:00:00 GMThttps://safedep.io/trivy-teampcp-supply-chain-compromisehttps://safedep.io/trivy-teampcp-supply-chain-compromiseA consolidated technical reference for the TeamPCP supply chain attack against Aqua Security's Trivy scanner. Covers the full attack chain from AI-assisted initial breach through credential theft, GitHub Actions tag poisoning, a self-propagating npm worm, and Kubernetes escape payloads. Includes IOCs, detection queries, and remediation steps.Mon, 23 Mar 2026 00:00:00 GMThttps://safedep.io/malicious-npm-react-refresh-updatehttps://safedep.io/malicious-npm-react-refresh-updateA malicious npm package impersonating react-refresh, Meta's library with 42 million weekly downloads, was detected by SafeDep. The package injects a two-layer obfuscated dropper into runtime.js that silently fetches and executes a platform-specific second-stage payload from malicanbur[.]pro on require(), targeting Windows, Linux, and macOS. Mon, 16 Mar 2026 00:00:00 GMThttps://safedep.io/writing-time-based-policies-in-vet-celhttps://safedep.io/writing-time-based-policies-in-vet-celProtect against unknown malicious open source packages by enforcing a supply chain cooling-off period using the now() CEL function in SafeDep vet.Tue, 10 Mar 2026 00:00:00 GMThttps://safedep.io/ai-native-sdlc-supply-chain-threat-modelhttps://safedep.io/ai-native-sdlc-supply-chain-threat-modelAI agents are rewriting the software development lifecycle. From vibe coding to autonomous CI/CD, every phase now involves an LLM making decisions about your code and dependencies. Here is a threat model for the AI-native SDLC from a supply chain security perspective.Mon, 09 Mar 2026 00:00:00 GMThttps://safedep.io/malicious-npm-package-pino-sdk-v2-env-exfiltrationhttps://safedep.io/malicious-npm-package-pino-sdk-v2-env-exfiltrationA malicious npm package impersonating the popular pino logger was detected by SafeDep. The package hides obfuscated code inside a legitimate library file to steal environment secrets and send them to a Discord webhook. Fri, 06 Mar 2026 00:00:00 GMThttps://safedep.io/gryph-ai-agent-audit-trailhttps://safedep.io/gryph-ai-agent-audit-trailAI coding agents operate with broad access to your codebase, credentials, and shell. Gryph logs every action they take to a local SQLite database, making agent behavior visible, queryable, and auditable.Wed, 04 Mar 2026 00:00:00 GMThttps://safedep.io/safedep-mcp-in-github-agentic-workflowhttps://safedep.io/safedep-mcp-in-github-agentic-workflowLearn how to integrate SafeDep MCP with GitHub Agentic Workflows to automatically evaluate the security posture of OSS dependencies in your pull requests using AI.Fri, 27 Feb 2026 00:00:00 GMThttps://safedep.io/shadow-ai-discovery-vethttps://safedep.io/shadow-ai-discovery-vetAI tools and SDKs are spreading across developer environments faster than security teams can track. vet discovers agents, MCP servers, extensions, and AI SDK usage in code. Open source, local, one CLI.Fri, 27 Feb 2026 00:00:00 GMThttps://safedep.io/schedaero-dependency-confusion-attackhttps://safedep.io/schedaero-dependency-confusion-attackA detailed analysis of a dependency confusion supply chain attack likely targeting Schedaero, a leading aviation software company. We dissect the payload, the exfiltration mechanism, and the indicators of compromise.Wed, 25 Feb 2026 00:00:00 GMThttps://safedep.io/npm-sandworm-mode-supply-chain-attackhttps://safedep.io/npm-sandworm-mode-supply-chain-attackStep-by-step technical analysis of the SANDWORM_MODE npm supply chain attack. We dissect yarsg and format-defaults malicious packages, decode multi-layer obfuscation, and trace the payload delivery chain.Sat, 21 Feb 2026 00:00:00 GMThttps://safedep.io/cline-cli-compromisedhttps://safedep.io/cline-cli-compromisedA compromised npm token was used to publish a tampered version of Cline CLI. A prompt injection vulnerability in Cline's AI-powered GitHub Actions workflow may have enabled the credential theft.Wed, 18 Feb 2026 00:00:00 GMThttps://safedep.io/why-we-built-a-hosted-mcp-server-for-ai-coding-agentshttps://safedep.io/why-we-built-a-hosted-mcp-server-for-ai-coding-agentsExposing an MCP server is trivial. Making it useful for AI agents is not. Here's what we learned dogfooding our own tool, and why we built a hosted MCP server backed by real-time open source threat intelligence. Mon, 16 Feb 2026 00:00:00 GMThttps://safedep.io/end-to-end-test-nextjs-msw-playwrighthttps://safedep.io/end-to-end-test-nextjs-msw-playwrightA practical Next.js 16 App Router E2E setup with Playwright and MSW that keeps server-side fetch deterministic by focusing mocking where it matters, not on server actions.Tue, 03 Feb 2026 08:59:02 GMThttps://safedep.io/agent-skills-threat-modelhttps://safedep.io/agent-skills-threat-modelDiscover critical security threats in Agent Skills - Anthropic's open format for AI agent capabilities. Learn about supply chain attacks, deferred code execution, prompt injection, and multiple attack vectors. Essential reading for developers and security teams implementing AI agents.Fri, 23 Jan 2026 10:45:00 GMThttps://safedep.io/the-state-of-mcp-registrieshttps://safedep.io/the-state-of-mcp-registriesExplore the architecture of the Model Context Protocol (MCP) and the state of its official registry. Learn how to consume server packages programmatically and discover the underlying challenges of data duplication and security in the current meta-registry ecosystem.Sat, 20 Dec 2025 00:00:00 GMThttps://safedep.io/dark-gpt-vscode-malicious-extensionhttps://safedep.io/dark-gpt-vscode-malicious-extensionMalicious extensions are lurking in the Visual Studio Code marketplace. In this case, we discover and analyze DarkGPT, a Visual Studio Code extension that exploits DLL hijacking to load malicious code through a signed Windows executable.Wed, 10 Dec 2025 00:00:00 GMThttps://safedep.io/react-server-nextjs-critical-vulnerability-find-and-fix-with-sbomhttps://safedep.io/react-server-nextjs-critical-vulnerability-find-and-fix-with-sbomA critical pre-authenticated remote code execution vulnerability (CVE-2025-55182) was disclosed in React Server Components, affecting Next.js applications using the App Router. Learn about the technical details of this prototype pollution vulnerability, how to identify affected applications using SBOM queries.Thu, 04 Dec 2025 10:45:00 GMThttps://safedep.io/shai-hulud-second-coming-supply-chain-attackhttps://safedep.io/shai-hulud-second-coming-supply-chain-attackCritical npm supply chain attack compromises zapier-sdk, @asyncapi, posthog, and @postman packages with self-replicating malware. Technical analysis reveals credential harvesting, GitHub Actions exploitation, and worm-like propagation affecting 25,000+ repositories. Includes IOCs, detection methods, and remediation steps.Mon, 24 Nov 2025 10:45:00 GMThttps://safedep.io/frontend-testing-guidehttps://safedep.io/frontend-testing-guideHow we test our Frontend applications powered by React Query and server components with Vitest.Tue, 28 Oct 2025 09:15:30 GMThttps://safedep.io/curious-case-of-dependency-change-with-embedded-binary-stringishhttps://safedep.io/curious-case-of-dependency-change-with-embedded-binary-stringishA routine dependency upgrade introduced a suspicious transitive dependency with an embedded executable. While manual analysis confirmed it wasn't malicious, this incident highlights the implicit trust we place in open source code and how attackers exploit the software supply chain through seemingly innocent dependency changes.Mon, 27 Oct 2025 00:00:00 GMThttps://safedep.io/malicious-npm-packages-hyatt-campaignhttps://safedep.io/malicious-npm-packages-hyatt-campaignThree malicious npm packages disguised as Hyatt internal dependencies were discovered using install hooks to execute malicious payloads. All packages share identical attack patterns and infrastructure.Thu, 23 Oct 2025 00:00:00 GMThttps://safedep.io/hacktoberfest-safedep-2025https://safedep.io/hacktoberfest-safedep-2025Learn how to contribute to SafeDep open source projects during Hacktoberfest 2025 and help secure the open source software supply chain.Mon, 06 Oct 2025 00:00:00 GMThttps://safedep.io/ship-code-not-malware-safedep-launches-github-apphttps://safedep.io/ship-code-not-malware-safedep-launches-github-appSafeDep launches a GitHub App for zero-configuration protection against malicious open source packages. Instantly scan pull requests and keep your code repositories safe from supply chain attacks.Thu, 25 Sep 2025 08:00:00 GMThttps://safedep.io/shai-hulud-supply-chain-attack-responsehttps://safedep.io/shai-hulud-supply-chain-attack-responseThe Shai-Hulud supply chain attack is a major incident targeting developers through malicious packages in the npm ecosystem. This post outlines the incident response steps that can be taken to contain and mitigate the impact of this attack. Mon, 22 Sep 2025 12:00:00 GMThttps://safedep.io/pitfalls-of-diff-based-sca-scannershttps://safedep.io/pitfalls-of-diff-based-sca-scannersDiff-based Software Composition Analysis (SCA) scanners in pull requests are prone to blind spots. By relying only on git diff data, they miss package context, suffer from nondeterministic rearrangements, and can be trivially bypassed—leaving vulnerabilities undetected. Fri, 19 Sep 2025 00:00:00 GMThttps://safedep.io/npm-supply-chain-attack-targeting-maintainershttps://safedep.io/npm-supply-chain-attack-targeting-maintainersnpm supply chain attacks continue. This time targeting @ctrl/tinycolor and multiple other packages with credential stealer malware. In this blog, we will analyze the attack and its impact on the npm ecosystem. We will also look at common attack patterns that are being used to target maintainers.Tue, 16 Sep 2025 16:00:00 GMThttps://safedep.io/multiple-npm-packages-compromised-billion-downloadshttps://safedep.io/multiple-npm-packages-compromised-billion-downloadsComplete analysis of sophisticated crypto wallet drainer found in 21 npm packages with over one billion weekly downloads. Includes detailed technical breakdown of 76KB malware payload disguised in has-ansi@6.0.1 and multi-stage attack architecture.Mon, 08 Sep 2025 16:00:00 GMThttps://safedep.io/nx-build-system-compromisehttps://safedep.io/nx-build-system-compromiseThe popular npm package `nx` was compromised, targeting Linux and macOS developers. Malicious versions included a postinstall script that stole credentials, exfiltrated sensitive files, and added destructive commands to shell configs, causing system shutdowns and data leaks.Wed, 27 Aug 2025 00:00:00 GMThttps://safedep.io/malicious-npm-package-targeting-tensorflow-usershttps://safedep.io/malicious-npm-package-targeting-tensorflow-usersA malicious NPM package targeting TensorFlow users was discovered on npm. The package uses typosquatting to target the popular `tensorflow` package.Tue, 12 Aug 2025 00:00:00 GMThttps://safedep.io/malicious-python-packages-target-crypto-developershttps://safedep.io/malicious-python-packages-target-crypto-developersMultiple malicious Python packages targeting crypto developers and their applications using typosquatting were discovered on PyPI. The packages were used to steal funds by executing a stealthy staking operation.Tue, 12 Aug 2025 00:00:00 GMThttps://safedep.io/pep-723-inline-metadata-securityhttps://safedep.io/pep-723-inline-metadata-securityPEP 723 introduces inline metadata for Python scripts, making tools like `uv` more convenient—but also potentially more dangerous. This post explores security pitfalls when dependencies are declared inside code files. Fri, 01 Aug 2025 00:00:00 GMThttps://safedep.io/vibe-coding-without-getting-pwnedhttps://safedep.io/vibe-coding-without-getting-pwnedAI coding agents make development faster but can inadvertently introduce security risks by suggesting unvetted packages. Learn how to use vet MCP server for adding security to your vibe coding adventures.Fri, 25 Jul 2025 00:00:00 GMThttps://safedep.io/eslint-config-prettier-major-npm-supply-chain-hackhttps://safedep.io/eslint-config-prettier-major-npm-supply-chain-hackA supply chain attack exploiting eslint-config-prettier and other popular npm packages were discovered with major supply chain impact. In this blog, we will explore the details of the hack and the impact it had on the npm ecosystem.Mon, 21 Jul 2025 00:00:00 GMThttps://safedep.io/sbom-direct-transitive-depshttps://safedep.io/sbom-direct-transitive-depsHidden transitive dependencies create security blind spots. This blog shows developers and CISOs how SafeDep vet uncovers full Maven dependency graphs, generating CycloneDX SBOMs and compliance-ready visuals. Sat, 05 Jul 2025 00:00:00 GMThttps://safedep.io/sbom-and-eu-cra-cyber-resilience-acthttps://safedep.io/sbom-and-eu-cra-cyber-resilience-actThe EU Cyber Resilience Act makes SBOMs mandatory for software products sold in Europe starting December 2027, with fines up to €15 million for non-compliance. Here's what software vendors need to know and how to prepare.Fri, 13 Jun 2025 17:58:43 GMThttps://safedep.io/introducing-vet-mcp-serverhttps://safedep.io/introducing-vet-mcp-serverIntroducing SafeDep Model Context Protocol (MCP) Server, a new feature in SafeDep vet to secure AI generated code and protect against slopsquatting attacks, vulnerable and malicious packages.Fri, 06 Jun 2025 00:00:00 GMThttps://safedep.io/license-compliance-with-sbomhttps://safedep.io/license-compliance-with-sbomAlthough open-source speeds up development, there are risks associated with licensing. This blog examines the ways in which Software Bills of Materials, or SBOMs, facilitate audits, enforce license compliance, and identify infractions early. Discover how to use tools like Vet to incorporate license checks into your DevSecOps pipeline.Thu, 05 Jun 2025 00:00:00 GMThttps://safedep.io/introducing-container-scanninghttps://safedep.io/introducing-container-scanningIntroducing Container Image Scanning, a new feature in vet to identify vulnerabilities and malicious packages in container images.Tue, 03 Jun 2025 00:00:00 GMThttps://safedep.io/software-bill-of-materials-sbomhttps://safedep.io/software-bill-of-materials-sbomModern software rarely ships as a single, hand-crafted binary. Instead, it is assembled from hundreds, sometimes thousands of third-party components that evolve on their own schedule. Knowing exactly what went into an application is now a basic security expectation, and the Software Bill of Materials (SBOM) is how that knowledge is expressed, stored and shared.Sun, 01 Jun 2025 00:00:00 GMThttps://safedep.io/digging-into-dynamic-malware-analysis-signalshttps://safedep.io/digging-into-dynamic-malware-analysis-signalsExplore how analyzing runtime behaviors using Dynamic Analysis data helps uncover abnormal activities in open source packages. By examining network connections and unusual binary executions during package installation, we identify potential malicious actors and packages.Mon, 19 May 2025 00:00:00 GMThttps://safedep.io/introducing-package-manager-guardhttps://safedep.io/introducing-package-manager-guardIntroducing Package Manager Guard (PMG), a new tool to protect developers from malicious packages at the time of installation. Seamless integration with popular package managers like npm, pnpm etc.Thu, 15 May 2025 00:00:00 GMThttps://safedep.io/dynamic-analysis-oss-package-at-scalehttps://safedep.io/dynamic-analysis-oss-package-at-scaleExploring the idea of building a complementary system that can verify and correlate static analysis findings. Thats where dynamic analysis comes in ie. the ability to "run" an open source package in an observed environment and determine its safety status based on real behavior at runtimeThu, 01 May 2025 00:00:00 GMThttps://safedep.io/malicious-npm-package-express-cookie-parserhttps://safedep.io/malicious-npm-package-express-cookie-parserA malicious npm package impersonating the popular Express cookie parser package was discovered by SafeDep Cloud malicious package scanning service.Wed, 23 Apr 2025 00:00:00 GMThttps://safedep.io/malicious-npm-package-impersonating-slf4jhttps://safedep.io/malicious-npm-package-impersonating-slf4jA malicious npm package impersonating the popular Java logging framework SLF4J is discovered by SafeDep Cloud malicious package scanning service.Mon, 21 Apr 2025 00:00:00 GMThttps://safedep.io/vet-defect-dojo-integrationhttps://safedep.io/vet-defect-dojo-integrationIntroducing DefectDojo Integration allowing vet users to export scan results to DefectDojo. Continue leveraging DefectDojo for your vulnerability management while using vet for identifying vulnerable and malicious open source packages.Mon, 14 Apr 2025 00:00:00 GMThttps://safedep.io/malysis-evaluation-using-datadog-malicious-packages-datasethttps://safedep.io/malysis-evaluation-using-datadog-malicious-packages-datasetAnalysis of malicious open source packages from Datadog's malicious packages dataset. Each of these packages were found in the wild and confirmed to be malicious. The goal of this analysis is to understand the nature of malicious OSS packages and how they are distributed in the wild.Thu, 10 Apr 2025 00:00:00 GMThttps://safedep.io/introducing-gitlab-ci-componenthttps://safedep.io/introducing-gitlab-ci-componentIntroducing GitLab CI/CD Component, available in GiLab CI Catalog for seamless integration of vet in GitLab CI. Protect against vulnerable and malicious packages in your GitLab projects.Mon, 31 Mar 2025 00:00:00 GMThttps://safedep.io/agentic-workflows-for-malicious-package-analysishttps://safedep.io/agentic-workflows-for-malicious-package-analysisExperiments with agentic workflows for malicious package analysis built using Claude Desktop, Model Context Protocol (MCP) server, static code analysis and SafeDep Cloud API tools.Fri, 28 Mar 2025 00:00:00 GMThttps://safedep.io/nyc-config-malicious-packagehttps://safedep.io/nyc-config-malicious-packagePossible typosquatting against @istanbuljs/load-nyc-config with ~25M weekly downloads.Thu, 13 Mar 2025 00:00:00 GMThttps://safedep.io/introducing-vetpkg-devhttps://safedep.io/introducing-vetpkg-devIntroducing vetpkg.dev - Built using SafeDep API to provide an easy to use visibility of open source component security information.Tue, 18 Feb 2025 00:00:00 GMThttps://safedep.io/vet-code-scanning-dependency-usage-evidencehttps://safedep.io/vet-code-scanning-dependency-usage-evidenceSafeDep Code Analysis framework augments vet, our free and open source tool with code context.Fri, 07 Feb 2025 00:00:00 GMThttps://safedep.io/what-is-next-gen-scahttps://safedep.io/what-is-next-gen-scaSoftware Composition Analysis has been there for a while. But the problems associated with open source vulnerabilities persist. Next-gen SCA is the promised solution. What is it and how does it work?Thu, 06 Feb 2025 00:00:00 GMThttps://safedep.io/burp-collaborator-for-dependency-confusion-attackhttps://safedep.io/burp-collaborator-for-dependency-confusion-attackMultiple npm packages impersonating popular package names were published to the npm registry including by a Snyk researcher apparently targeting internal packages at Cursor AI.Thu, 16 Jan 2025 00:00:00 GMThttps://safedep.io/multiple-npm-malicious-package-impersonating-popular-nameshttps://safedep.io/multiple-npm-malicious-package-impersonating-popular-namesMultiple npm packages impersonating popular package names are being used to distribute malware. We take a closer look at the campaign.Wed, 11 Dec 2024 00:00:00 GMThttps://safedep.io/malicious-oss-package-analysis-llm-oraclehttps://safedep.io/malicious-oss-package-analysis-llm-oracleMalware hidden in open source library packages are real. In this article, we analyse the malicious npm package llm-oracle.Mon, 04 Nov 2024 00:00:00 GMThttps://safedep.io/vet-policy-as-code-accel-cyber-security-summit-2024https://safedep.io/vet-policy-as-code-accel-cyber-security-summit-2024This is a talk given at Accel Cyber Security Summit 2024 about securing the open source software supply chain using SafeDep vet. This talk highlights a case study of using policy as code for setting up guardrailsTue, 22 Oct 2024 00:00:00 GMThttps://safedep.io/safedep-cloud-preview-sql-query-apihttps://safedep.io/safedep-cloud-preview-sql-query-apiThis is a '#buildinpublic' update for SafeDep Cloud Development. UI often becomes a bottleneck for developer tools causing friction. We want to overcome it by providing an SQL query interface of SBOM and security metadata.Fri, 18 Oct 2024 00:00:00 GMThttps://safedep.io/why-oss-risks-larger-than-scahttps://safedep.io/why-oss-risks-larger-than-scaOpen Source Software is critical. However it often comes with inherited risks that are larger than what can be tackled by conventional Software Composition Analysis (SCA) tools.Thu, 03 Oct 2024 00:00:00 GMThttps://safedep.io/sneak-peak-into-control-tower-sql-queryhttps://safedep.io/sneak-peak-into-control-tower-sql-querySoftware Bill of Material (SBOM) provides an inventory of all software components. However, they are useful only when a flexible query interface is built on top.Mon, 30 Sep 2024 00:00:00 GMThttps://safedep.io/safe-and-secure-oss-consumptionhttps://safedep.io/safe-and-secure-oss-consumptionOpen Source software is the foundation of modern software projects. Any software written today consists of 70-90% of open source code in form of libraries and other components.Sun, 15 Sep 2024 00:00:00 GMT