Supply-chain incident tracker

Dependency-confusion probes mimicking internal front-end libraries

Public packages squatting internal-looking scopes (@ecg-internal, @grabcad, @blueskydataplatform and others) run a beacon at install that reports the host, path and Node version to a hard-coded server.

@ecg-internal/* @grabcad/* @blueskydataplatform/shared-ui

Details, affected versions and what to do →

Malware advisories against established npm packages

GitHub's malware feed flagged specific versions of several npm packages with real weekly downloads, including agentic-awesome-skills, opencode-skills-collection, @lumen-labs-dev/whisper-node, @factiii/runner and @tekmidian/pai. No public analysis of the payloads exists yet.

agentic-awesome-skills opencode-skills-collection @lumen-labs-dev/whisper-node @factiii/runner

Details, affected versions and what to do →

Arista VeloCloud Orchestrator SQL injection exploited as a zero-day

A SQL injection flaw (CVE-2026-114625, CVSS 9.9) in on-premises VeloCloud Orchestrator lets any logged-in user, even with read-only access, escalate to superuser operator. Arista patched it on 22 October after it was exploited as a zero-day; CISA listed it as exploited on 23 October.

VeloCloud Orchestrator (on-premises)

Details, affected versions and what to do →

LiteLLM 1.107.0 release-pipeline compromise

Stolen maintainer GitHub tokens were used to run LiteLLM's real release pipeline against a lookalike fork. The 1.107.0 PyPI wheels and Docker images planted a credential stealer and an hourly remote code loader.

litellm

Details, affected versions and what to do →

@sudobility npm client packages ship a cryptominer

New versions of four client SDK packages added a postinstall script that downloads and installs an XMRig Monero miner, with persistence when run as root.

@sudobility/indexer_client @sudobility/wildduck_client @sudobility/shaperouter_client @sudobility/testomniac_client

Details, affected versions and what to do →

eMudhra / emSign intermediate certificate keys compromised

Eight intermediate certificate authorities chaining to emSign ECC Root CA - G3 were found to have weakly generated private keys. Browsers blocked them between 17 and 20 October; Mozilla has removed the root and Chrome is expected to follow.

Details, affected versions and what to do →

Stolen UpdraftCentral keys used to plant backdoor plugins

An attacker with leaked UpdraftCentral dashboard keys installed 99 different backdoor plugins on WordPress sites between 18 and 19 October. The plugins create a hidden administrator when visited with a secret parameter.

updraftplus (with UpdraftCentral connected)

Details, affected versions and what to do →

Rank Math SEO PRO 3.0.123 backdoored at the vendor

Tampered builds of the Rank Math SEO PRO WordPress plugin were served from the vendor's own update channel between 15 October 20:02 and 16 October 07:12 UTC. They plant persistent backdoors, create rogue admin accounts and steal server secrets.

seo-by-rank-math-pro

Details, affected versions and what to do →

Cisco Secure Email Gateway file-write flaw under active attack

A path traversal flaw (CVE-2026-76519, CVSS 9.8) lets an unauthenticated sender write files to a Cisco Secure Email Gateway when File Reputation is enabled on a mail policy and Content Scanner Tools is older than 25.3.0.5525. Cisco reports active exploitation.

Cisco AsyncOS for Secure Email Gateway

Details, affected versions and what to do →

Shopify apps turned into checkout phishing redirects (HulkApps, Selleasy, Swym)

Malicious JavaScript was delivered through the settings of third-party Shopify apps (Hulk Product Options, Selleasy, and reportedly Swym Wishlist Plus). On a real checkout click it cancelled the navigation and sent shoppers to a lookalike checkout page that captured card details, then forwarded them to the genuine checkout.

Details, affected versions and what to do →

Tensorlake npm SDK compromised with a self-spreading worm

Version 0.5.144 ran a preinstall worm that steals npm, GitHub and cloud tokens and spreads to other packages the victim can publish.

tensorlake

Details, affected versions and what to do →

Collabora Built-in CODE Server for Nextcloud exploited to plant web shells

A command-injection flaw (CVE-2026-110447) in the Built-in CODE Server app for Nextcloud lets an unauthenticated attacker run commands with web server privileges when the local Collabora server is offline. Attackers have used it since at least 10 September to plant PHP web shells and target credential stores and cryptocurrency wallet files.

richdocumentscode (Nextcloud app)

Details, affected versions and what to do →

Mini Shai-Hulud npm worm (SAP, TanStack and AntV waves)

'Mini Shai-Hulud' is a 2026 credential-stealing worm campaign that hijacks npm publishing, via stolen maintainer accounts or abused CI/OIDC trusted publishing, to push trojanized package versions. Each malicious version adds an install-time hook (preinstall, or a 'prepare' script in a git-based optional dependency) that runs an obfuscated payload with the Bun runtime.

@antv/g2 @antv/g6 @antv/x6 @antv/scale

Details, affected versions and what to do →

Shai-Hulud self-replicating npm worm (first wave)

Shai-Hulud was the first widely reported self-spreading worm on npm. Infected package versions gained a postinstall script that ran a bundled file (bundle.js) whenever a developer or CI system installed the package.

@ctrl/tinycolor ngx-bootstrap angulartics2 @crowdstrike/commitlint

Details, affected versions and what to do →

chalk/debug npm maintainer phishing hijack

A maintainer of very widely used npm packages (Josh Junon, 'Qix') was phished by a fake npm '2FA reset' email from the lookalike domain npmjs.help. The attacker used his account to publish malicious versions of chalk, debug and about 17 related packages, which together get billions of downloads a week.

chalk debug ansi-styles ansi-regex

Details, affected versions and what to do →

polyfill.io CDN takeover

polyfill.io was a popular service that sites loaded with a script tag to add modern JavaScript features to older browsers. In February 2024 the domain and its GitHub account were bought by Funnull, a company little was known about.

cdn.polyfill.io cdn.polyfill.com

Details, affected versions and what to do →