Poisoned Pipeline

Poisoned Pipeline / Incidents / AS139

AS139 · 2025-07

llm-oracle malicious npm payload

npmAI coding agents

SafeDep analysis of malicious npm package llm-oracle (malware in an
open-source-looking library).

Mapped techniques

supply-chain campaign

T0109 · Resource Development · Publish malicious artifact

llm-oracle on npm.

T0159 · Execution · Malicious artifact execution

Embedded payload.

Sources