https://isotope13.io/compendium/ Supply-chain attacks where an official project or vendor distribution point distributed malicious code. en-us Fri, 18 Sep 2026 11:55:08 GMT https://isotope13.io/compendium/2026/bindsnet/ https://isotope13.io/compendium/2026/bindsnet/ Wed, 02 Sep 2026 00:00:00 GMT attack An attacker with a BindsNET collaborator's credentials force-pushed a forged copy of an existing merge commit over 20 branches on 2026-08-29, adding a hidden Visual Studio Code task that ran malware disguised... https://isotope13.io/compendium/2026/registry-coder-com/ https://isotope13.io/compendium/2026/registry-coder-com/ Mon, 31 Aug 2026 00:00:00 GMT attack An attacker added unauthorized IPs to the Cloudflare pool behind registry.coder.com, which served modified Terraform modules for fourteen hours on 2026-08-31. The modules ran a script that gathered provisioner... https://isotope13.io/compendium/2026/7nohe-openapi-react-query-codegen/ https://isotope13.io/compendium/2026/7nohe-openapi-react-query-codegen/ Sat, 29 Aug 2026 00:00:00 GMT attack A GitHub Actions release workflow fired on any pull request comment reading "npm publish", with no check on who wrote it. An attacker used it to build, sign and publish ten malicious versions of... https://isotope13.io/compendium/2026/arrayref/ https://isotope13.io/compendium/2026/arrayref/ Thu, 20 Aug 2026 00:00:00 GMT attack A compromised crates.io account republished arrayref, internment, and append-only-vec on 2026-08-20 with a dependency on the typosquat proc-macro1, whose build script downloaded and ran a second stage at... https://isotope13.io/compendium/2026/bdthemes/ https://isotope13.io/compendium/2026/bdthemes/ Sat, 08 Aug 2026 00:00:00 GMT attack Attackers with write access to BdThemes' promotional JSON bucket returned a crafted display_id that exploited an unescaped attribute in the vendor's Biggopti banner script. The XSS ran in every admin session,... https://isotope13.io/compendium/campaigns/wordpress-admin-persistence-2026/ https://isotope13.io/compendium/campaigns/wordpress-admin-persistence-2026/ Sat, 08 Aug 2026 00:00:00 GMT campaign Between June and August 2026 the same operators reached WordPress sites through three vendor-side compromises rather than through site vulnerabilities, hitting Awesome Motive's CDN, the ARVE plugin's source,... https://isotope13.io/compendium/2026/jaredwray/ https://isotope13.io/compendium/2026/jaredwray/ Wed, 05 Aug 2026 00:00:00 GMT attack On 2026-08-04 an attacker took over the jaredwray account and republished the keyv and cacheable families with a preinstall hook that downloaded Bun and ran a credential harvester. The worm spread to 444... https://isotope13.io/compendium/campaigns/chaindrop-2026/ https://isotope13.io/compendium/campaigns/chaindrop-2026/ Wed, 05 Aug 2026 00:00:00 GMT campaign ChainDrop began with the compromise of the keyv and cacheable maintainer on 2026-08-04 and spread to 444 package names across 2,212 versions in under four hours, taking in servicetitan, ornikar, qlik, and... https://isotope13.io/compendium/2026/arch-user-repository-2/ https://isotope13.io/compendium/2026/arch-user-repository-2/ Sat, 01 Aug 2026 00:00:00 GMT attack A late-July 2026 wave of adopted AUR packages pushed malicious commits that dropped a validator binary into the build path, running with sudo during the build. Arch disabled package adoption on 2026-07-30 and... https://isotope13.io/compendium/campaigns/atomic-arch-2026/ https://isotope13.io/compendium/campaigns/atomic-arch-2026/ Sat, 01 Aug 2026 00:00:00 GMT campaign Attackers adopted abandoned Arch User Repository packages through AUR's own stewardship process and rewrote their PKGBUILDs to pull malicious dependencies. Waves in June and late July 2026 led Arch to disable... https://isotope13.io/compendium/2026/joyfill/ https://isotope13.io/compendium/2026/joyfill/ Tue, 28 Jul 2026 00:00:00 GMT attack Two Joyfill beta releases published on 2026-07-28 appended an obfuscated implant after the legitimate package code. It resolved its C2 through blockchain transactions, opened a Socket.IO remote access channel,... https://isotope13.io/compendium/2026/advanced-responsive-video-embedder/ https://isotope13.io/compendium/2026/advanced-responsive-video-embedder/ Tue, 28 Jul 2026 00:00:00 GMT attack Version 10.8.7 of Advanced Responsive Video Embedder carried a concealed authentication bypass that logged any unauthenticated request bearing a hardcoded token in as an administrator. Wordfence PRISM found it... https://isotope13.io/compendium/2026/adform/ https://isotope13.io/compendium/2026/adform/ Mon, 27 Jul 2026 00:00:00 GMT attack Between 2026-07-26 and 2026-07-27 the official `trackpoint-async.js` served from Adform's `s2.adform.net` carried a clipboard hijacker that swapped Bitcoin, Ethereum, and TRON wallet addresses on the roughly... https://isotope13.io/compendium/2026/mrmustard/ https://isotope13.io/compendium/2026/mrmustard/ Fri, 24 Jul 2026 00:00:00 GMT attack mrmustard 0.7.4 was uploaded to PyPI on 2026-07-23 from a hijacked maintainer account with no matching tag or commit upstream. It read SSH keys, AWS credentials, and kubeconfig on import, and installed three... https://isotope13.io/compendium/2026/rubygems/ https://isotope13.io/compendium/2026/rubygems/ Sun, 19 Jul 2026 00:00:00 GMT attack Attackers took over two long-idle RubyGems maintainer accounts and published the first releases in years for Dendreo and a fastlane plugin. The loader skipped CI environments and installed a persistent daemon... https://isotope13.io/compendium/2026/asyncapi/ https://isotope13.io/compendium/2026/asyncapi/ Tue, 14 Jul 2026 00:00:00 GMT attack An attacker exploited a pull_request_target workflow in the AsyncAPI generator repository to steal an npm publish token, then shipped four @asyncapi packages that fetched an encrypted Miasma second stage from... https://isotope13.io/compendium/campaigns/miasma-2026/ https://isotope13.io/compendium/campaigns/miasma-2026/ Tue, 14 Jul 2026 00:00:00 GMT campaign Miasma was a 2026 npm worm that stole CI and cloud credentials, then republished trojanized versions from any maintainer account it reached. It ran from the @redhat-cloud-services compromise on May 29 through... https://isotope13.io/compendium/2026/jscrambler/ https://isotope13.io/compendium/2026/jscrambler/ Sat, 11 Jul 2026 00:00:00 GMT attack An attacker with a stolen npm publishing credential shipped five malicious jscrambler releases and poisoned its webpack, gulp, grunt, and metro plugins on 2026-07-11. Later versions moved the dropper out of... https://isotope13.io/compendium/2026/leoplatform/ https://isotope13.io/compendium/2026/leoplatform/ Fri, 26 Jun 2026 00:00:00 GMT attack In late June 2026 the Miasma worm republished 23 LeoPlatform and RStreams npm packages with a malicious binding.gyp, then reached the Verana Blockchain Go module. It was the campaign's first move outside npm,... https://isotope13.io/compendium/2026/mastra/ https://isotope13.io/compendium/2026/mastra/ Wed, 17 Jun 2026 00:00:00 GMT attack An attacker took over a maintainer account with publish rights across the @mastra npm organization and, in 88 minutes on 2026-06-17, republished more than 140 packages with a dependency on easy-day-js, whose... https://isotope13.io/compendium/2026/shapedplugin/ https://isotope13.io/compendium/2026/shapedplugin/ Tue, 16 Jun 2026 00:00:00 GMT attack Attackers injected a self-deleting loader into ShapedPlugin's commercial Pro plugin builds distributed through the vendor's Easy Digital Downloads update endpoint. The dropped payload installed a fake... https://isotope13.io/compendium/2026/awesome-motive/ https://isotope13.io/compendium/2026/awesome-motive/ Sat, 13 Jun 2026 00:00:00 GMT attack An attacker used a CDN API key found on Awesome Motive's marketing server to modify the SDK files that OptinMonster, TrustPulse, and PushEngage load into customer sites. The injected script created hidden... https://isotope13.io/compendium/2026/arch-user-repository/ https://isotope13.io/compendium/2026/arch-user-repository/ Fri, 12 Jun 2026 00:00:00 GMT attack Starting 2026-06-11 attackers used the AUR's orphaned-package adoption process to take over abandoned packages, then added a pacman install scriptlet that npm-installed atomic-lockfile as root at install time.... https://isotope13.io/compendium/2026/injective-labs/ https://isotope13.io/compendium/2026/injective-labs/ Mon, 08 Jun 2026 00:00:00 GMT attack A trusted contributor account pushed commits that wrapped the Injective SDK's key derivation functions, and @injectivelabs/sdk-ts@1.20.21 shipped them to npm on 2026-06-08. Mnemonics and private keys were... https://isotope13.io/compendium/2026/asteroiddao/ https://isotope13.io/compendium/2026/asteroiddao/ Fri, 05 Jun 2026 00:00:00 GMT attack JFrog found a Rust-built npm worm in 36 packages published from the compromised asteroiddao account, carrying an eBPF kernel rootkit and a Tor C2. It backdated commits across nine GitHub organizations and... https://isotope13.io/compendium/2026/vapi-ai-server-sdk/ https://isotope13.io/compendium/2026/vapi-ai-server-sdk/ Fri, 05 Jun 2026 00:00:00 GMT attack On 2026-06-03 the Miasma worm republished 57 npm packages in under two hours, hiding execution in a 157-byte binding.gyp file instead of an install script. The largest victim was @vapi-ai/server-sdk, at more... https://isotope13.io/compendium/2026/redhat-cloud-services/ https://isotope13.io/compendium/2026/redhat-cloud-services/ Tue, 02 Jun 2026 00:00:00 GMT attack An attacker used a Red Hat employee's GitHub account, compromised by a malicious VS Code extension, to inject the Miasma preinstall dropper into 32 @redhat-cloud-services npm packages. Red Hat published 96... https://isotope13.io/compendium/2026/laravel-lang/ https://isotope13.io/compendium/2026/laravel-lang/ Sat, 23 May 2026 00:00:00 GMT attack An attacker with push access to Laravel-Lang rewrote every tag in lang, attributes, actions, and http-statuses to commits that autoloaded a credential stealer through composer. The dropper fetched a PHP second... https://isotope13.io/compendium/2026/tiledesk/ https://isotope13.io/compendium/2026/tiledesk/ Thu, 21 May 2026 00:00:00 GMT attack On 2026-05-18 nine Tiledesk repositories received Megalodon's Optimize-Build workflow commit. The maintainer published @tiledesk/tiledesk-server 2.18.6 through 2.18.12 from the poisoned tree between 2026-05-19... https://isotope13.io/compendium/2024/art-template/ https://isotope13.io/compendium/2024/art-template/ Wed, 20 May 2026 00:00:00 GMT attack The author sold `art-template` on 2024-11-17 to KILLER WHAL AI SDN BHD. The new owners shipped 4.13.3, 4.13.5, and 4.13.6 with a browser-bundle loader that fed the Coruna iOS exploit kit through utaq.cfww.shop... https://isotope13.io/compendium/2026/durabletask/ https://isotope13.io/compendium/2026/durabletask/ Tue, 19 May 2026 00:00:00 GMT attack TeamPCP published malicious durabletask 1.4.1, 1.4.2, and 1.4.3 to PyPI with a stolen token, bypassing Microsoft's CI/CD path. The dropper fetched rope.pyz to harvest cloud and password-manager credentials,... https://isotope13.io/compendium/2026/antv/ https://isotope13.io/compendium/2026/antv/ Tue, 19 May 2026 00:00:00 GMT attack On 2026-05-19, TeamPCP took the shared `atool` npm account and published 639 malicious versions across 323 packages — most of the @antv ecosystem and a long tail of standalone neighbors. The bun-based dropper... https://isotope13.io/compendium/campaigns/shai-hulud-here-we-go-again/ https://isotope13.io/compendium/campaigns/shai-hulud-here-we-go-again/ Tue, 19 May 2026 00:00:00 GMT campaign Shai-Hulud: Here We Go Again was a May 2026 TeamPCP campaign affecting roughly 169 to 170+ npm package names, plus 2 PyPI packages, with combined reported download volume above 200 million per week. https://isotope13.io/compendium/2026/nx-console/ https://isotope13.io/compendium/2026/nx-console/ Mon, 18 May 2026 00:00:00 GMT attack A compromised contributor published Nx Console 18.95.0 to the VS Code Marketplace and OpenVSX on 2026-05-18. The malicious build fetched an obfuscated payload that harvested Vault, npm, AWS, GitHub, 1Password,... https://isotope13.io/compendium/2026/actions-cool/ https://isotope13.io/compendium/2026/actions-cool/ Mon, 18 May 2026 00:00:00 GMT attack TeamPCP re-pointed all 53 issues-helper tags and all 15 maintain-one-comment tags to a single dangling imposter commit on 2026-05-18. The injected step downloaded Bun, scraped Runner.Worker memory for masked... https://isotope13.io/compendium/campaigns/megalodon-2026/ https://isotope13.io/compendium/campaigns/megalodon-2026/ Mon, 18 May 2026 00:00:00 GMT campaign Between 11:36 and 17:48 UTC on 2026-05-18 an unidentified actor pushed 5,718 commits across 5,561 GitHub repositories, dropping a base64-encoded bash payload into a .github/workflows file and exfiltrating CI... https://isotope13.io/compendium/2026/bfunky-http-parser/ https://isotope13.io/compendium/2026/bfunky-http-parser/ Sun, 17 May 2026 00:00:00 GMT attack An attacker pushed an Analytics.php payload into bfunky/http-parser and re-tagged 11 historical releases on GitHub, causing Packagist to serve a host-data stealer to anyone installing the abandoned PHP HTTP... https://isotope13.io/compendium/2026/node-ipc/ https://isotope13.io/compendium/2026/node-ipc/ Thu, 14 May 2026 00:00:00 GMT attack Three malicious node-ipc npm releases were published on 2026-05-14 after the dormant `atiertant` co-maintainer account was recovered via an expired email domain. The obfuscated payload harvested developer,... https://isotope13.io/compendium/2026/mistralai-python/ https://isotope13.io/compendium/2026/mistralai-python/ Tue, 12 May 2026 00:00:00 GMT attack Mistral's PyPI SDK and npm SDK packages appeared in the May 2026 Shai-Hulud wave. The affected releases carried campaign loaders through official package distribution paths. https://isotope13.io/compendium/2026/wot-api/ https://isotope13.io/compendium/2026/wot-api/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 wot-api npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/ts-dna/ https://isotope13.io/compendium/2026/ts-dna/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 ts-dna npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/safe-action/ https://isotope13.io/compendium/2026/safe-action/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 safe-action npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/opensearch-js/ https://isotope13.io/compendium/2026/opensearch-js/ Tue, 12 May 2026 00:00:00 GMT attack Four @opensearch-project/opensearch prereleases were published with Mini Shai-Hulud malware. OpenSearch removed them and blocked repository writes during credential rotation. https://isotope13.io/compendium/2026/nextmove-mcp/ https://isotope13.io/compendium/2026/nextmove-mcp/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 nextmove-mcp npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/guardrails-ai/ https://isotope13.io/compendium/2026/guardrails-ai/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 guardrails-ai PyPI package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/git-git-git/ https://isotope13.io/compendium/2026/git-git-git/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 git-git-git npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/git-branch-selector/ https://isotope13.io/compendium/2026/git-branch-selector/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 git-branch-selector npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/cross-stitch/ https://isotope13.io/compendium/2026/cross-stitch/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 cross-stitch npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/cmux-agent-mcp/ https://isotope13.io/compendium/2026/cmux-agent-mcp/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 cmux-agent-mcp npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface. https://isotope13.io/compendium/2026/agentwork-cli/ https://isotope13.io/compendium/2026/agentwork-cli/ Tue, 12 May 2026 00:00:00 GMT attack JFrog listed 1 agentwork-cli npm package in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface.