Intelligence Feed

3mo ago · socket-dev

AI music generator Suno suffered a breach stemming from the Shai-Hulud worm, which compromised a developer's machine and exfiltrated GitHub and cloud credentials. The attacker, using the handle ellie.191, accessed Suno's source code, customer data, and payment information without the company's public notification. The breach highlights the ongoing impact of the Shai-Hulud campaign, which spreads via trojanized npm, PyPI, and Packagist packages and exfiltrates credentials to public GitHub repositories.

3mo ago · socket-dev

Next.js is transitioning to a scheduled security release model to address vulnerabilities in a predictable and coordinated manner, replacing ad-hoc patching. This change follows high-severity incidents like React2Shell (CVE-2025-55182), a critical remote code execution flaw in React Server Components that was widely exploited. The new program enables advance notice of patches, allowing organizations time to plan upgrades and implement mitigations. Vercel cites increasing vulnerability discovery rates due to AI-assisted tools as a driver for more frequent and structured releases.

3mo ago · socket-dev

A cyber threat campaign has distributed 11 malicious NuGet packages masquerading as game utilities and cheat panels targeting Russian-speaking communities. These packages act as first-stage downloaders that fetch and execute a second-stage Windows payload named pepesoft.exe from GitHub and Hugging Face under the operator-controlled account pepegit666. The payload enables host surveillance, including hardware fingerprinting, Google Sheets-based telemetry, remote ban-list checks, and in some variants, Telegram-based remote control with screenshot exfiltration capabilities.

3mo ago · socket-dev

A supply chain attack has compromised three npm packages in the @asyncapi namespace, including @asyncapi/generator-helpers, @asyncapi/generator-components, and @asyncapi/generator. These packages deliver a multi-stage botnet loader known as Miasma, which downloads its second-stage payload from IPFS and establishes persistence on the victim's system. The malware supports command execution, credential harvesting, and evasion techniques, posing significant risk to development and CI environments.

3mo ago · socket-dev

The jscrambler npm package was compromised in a supply chain attack via the release of version 8.14.0 on July 11, 2026. This malicious version introduced an undocumented preinstall hook that executes dist/setup.js, which in turn runs hidden native binaries for Windows, macOS, and Linux. These binaries are embedded in an obfuscated CSI container and are automatically executed during installation, posing a risk to developer environments, CI systems, and build pipelines without requiring any explicit use of the package.

3mo ago · socket-dev

A malicious NuGet package named 'Braintree.Net' has been identified as a typosquatting campaign targeting developers using the legitimate Braintree payment SDK. The package intercepts live credit card data, steals merchant API credentials, and harvests environment secrets through a multi-stage .NET implant. It exfiltrates sensitive data to attacker-controlled domains and uses obfuscated C2 communications, particularly in companion dependencies like DependencyInjector.Core. The threat relies on production-only gating to avoid detection during development and testing.

3mo ago · socket-dev

A compromised version of the @injectivelabs/sdk-ts npm package (1.20.21) was published with malicious code designed to exfiltrate cryptocurrency wallet private keys and mnemonic phrases. The backdoor was introduced via a compromised developer account and spread to 17 additional scoped packages that pinned the malicious version. The stolen data was exfiltrated via POST requests to a seemingly legitimate Injective Labs infrastructure endpoint, enabling attackers to reconstruct and access victims' wallets. Although the incident was quickly detected and mitigated, the malicious package versions remain downloadable.

3mo ago · socket-dev

npm v12 introduces security defaults that disable install-time script execution by default, requiring explicit approval for lifecycle scripts, git dependencies, and remote URLs. This change mitigates supply chain attacks like the Miasma 'Phantom Gyp' campaign, which exploited implicit node-gyp rebuilds to run malicious code during installation. The release also begins deprecating 2FA-bypass granular access tokens to reduce risks from compromised accounts. These measures align npm with other package managers and improve resistance to automated malware distribution via dependency installation.

3mo ago · socket-dev

The pnpm 11.10 release introduces security enhancements to prevent registry token redirection attacks in the npm ecosystem. A new _auth configuration ensures registry credentials are bound to their intended registry URL, preventing malicious project files from redirecting valid tokens to attacker-controlled hosts. This update mitigates supply chain risks by limiting the privileges of repository-controlled files and hardening authentication mechanisms.

3mo ago · socket-dev

A coordinated campaign across npm and PyPI registries has been identified, distributing 17 malicious packages that typosquat popular payment SDKs such as PaySafe, Skrill, and Neteller. The packages mimic legitimate SDKs to harvest environment variables containing sensitive data like API keys, tokens, and credentials. The stolen data is exfiltrated to an AWS-hosted C2 server using ngrok infrastructure, with anti-sandboxing and obfuscation techniques employed to evade detection.

3mo ago · socket-dev

The Node.js Security Working Group is considering a shift to a public workflow for handling lower-severity security reports due to an overwhelming influx of AI-generated vulnerability submissions via HackerOne. Security maintainer Rafael Gonzaga attributes the surge to LLM-driven fuzzing and scanning tools, which produce highly similar reports, undermining the value of private disclosure. The proposal aims to reduce operational overhead by reserving private embargo processes for high-severity issues while enabling public handling for others, though maintainers remain divided on whether this change will alleviate workload bottlenecks.

3mo ago · socket-dev

PolinRider is a North Korea-linked supply chain campaign targeting developer ecosystems, including npm, Packagist, Go modules, and Chrome extensions. The threat actors compromise maintainer accounts, modify legitimate repositories with obfuscated JavaScript loaders, and use Git history rewriting to conceal malicious changes. These loaders retrieve encrypted second-stage payloads from blockchain infrastructure, execute them via eval(), and have delivered malware such as DEV#POPPER and OmniStealer. The campaign remains active, with ongoing compromises across multiple open source platforms.

3mo ago · socket-dev

GitHub has released actions/checkout v7 to mitigate a long-standing supply chain risk in GitHub Actions where privileged workflows using pull_request_target could execute attacker-controlled code from untrusted pull requests. These workflows run with elevated permissions, including access to secrets and tokens, and previously allowed malicious actors to steal credentials or publish malicious packages. The update blocks unsafe checkouts by default, particularly those pulling code from forked pull requests in high-privilege contexts. This change addresses a known attack pattern exploited in recent incidents involving Nx, PostHog, and TanStack.

3mo ago · socket-dev

The article discusses the growing risk of software supply chain attacks in the era of AI-powered development, where AI agents autonomously pull and execute unvetted open source packages outside traditional security monitoring. These agents operate in blind spots, such as ephemeral sandboxes, where no scanning or registry controls exist. The speed of modern attacks—often exploiting vulnerabilities within hours of disclosure—exceeds traditional response timelines, rendering forensic-focused defenses ineffective. Proactive governance at the point of package ingestion, supported by real-time threat intelligence, is presented as a necessary defense.

3mo ago · socket-dev

The U.S. government abruptly suspended global access to Anthropic's AI models, Claude Fable 5 and Mythos 5, citing national security risks following jailbreaks and unauthorized vulnerability discoveries in federal systems. The models, used for automated code analysis, were deemed a supply chain risk, prompting a federal blackout and export controls under ECRA. The shutdown highlights the growing classification of advanced AI as critical infrastructure, with significant implications for enterprise dependency and national cybersecurity policy.

3mo ago · socket-dev

A new wave of the Miasma Mini Shai-Hulud supply chain attack has compromised npm packages under LeoPlatform and RStreams, as well as a Go module associated with Verana Blockchain. The campaign uses malicious binding.gyp files in npm packages to trigger JavaScript execution during installation, stages payloads via Bun, and targets developer environments, CI/CD pipelines, and GitHub Actions for credential theft. It also spreads through poisoned repositories and source configurations, with persistence mechanisms targeting AI coding assistants and IDEs. The activity overlaps with prior incidents involving the same malware family and operational markers like 'RevokeAndItGoesKaboom'.

3mo ago · socket-dev

The Rolldown and Vite projects withdrew a Rust-based React Compiler integration due to a 17% increase in binary size, raising concerns about framework-specific bloat in otherwise agnostic tools. The integration, funneled through the Oxc project, aimed to improve build performance but faced criticism for imposing costs on all users regardless of React usage. The debate highlights a broader tension in frontend tooling between performance gains from native Rust integrations and the overhead of larger binaries, with potential implications for other frameworks like Vue, Svelte, and Angular.

3mo ago · socket-dev

The Miasma Mini Shai-Hulud supply chain campaign has expanded to compromise legitimate @immobiliarelabs npm packages, specifically Backstage plugins for GitLab and LDAP authentication. Malicious versions were published on June 26, 2026, using a hidden root-level index.js to execute a multi-stage payload that steals developer and CI/CD secrets, including tokens, SSH keys, and cloud credentials. The attack leverages GitHub Actions deployment triggers and may have originated from a compromised third-party GitHub Action, codfish/semantic-release-action, enabling further propagation through poisoned workflows and exfiltration to attacker-controlled repositories.

3mo ago · socket-dev

Malicious Chrome and Firefox browser extensions branded as 'VPN Go: Free VPN' have been distributing clipboard-stealing malware through staged updates. Initially appearing as legitimate free VPN tools, the extensions later added functionality to monitor and exfiltrate clipboard data, including passwords, API keys, and cryptocurrency addresses. The stolen data is sent to hardcoded IP addresses using HTTP GET requests with chunked encoding and session identifiers. Both extensions use obfuscated JavaScript and share infrastructure, indicating a coordinated campaign targeting user privacy under the guise of security.

3mo ago · socket-dev

The article discusses a surge in software supply chain attacks, where threat actors compromise popular open source packages and leverage trusted development workflows to distribute malicious code. The rise of AI coding agents exacerbates the risk by automatically pulling in dependencies without sufficient review, increasing the speed and scale of potential compromise. Attackers are targeting development tools such as package registries, IDE extensions, and source repositories, often evading traditional security measures.

3mo ago · socket-dev