Poisoned Pipeline

Poisoned Pipeline / Incidents / AS86

AS86 · 2026-07

@copilot-mcp/apex macOS infostealer republish

npmmacOS softwareMCPGit / GitHubKubernetesVS Code / IDE

npm removed @apexfdn/apex for malware; SafeDep found the operator
republished the same postinstall macOS infostealer as @copilot-mcp/apex
about 11 hours later. Targets Web3 founders/developers: browser data,
20+ crypto wallets, SSH/AWS/Kubernetes creds via osascript and
curl|zsh, beacon every 60 seconds. npm removed the republish too;
GitHub binaries and C2 stayed live. A later wave by the same
publisher, @apexacc/cli and @apexacc/audit, is AS307. That wave is
not this republish.

Mapped techniques

supply-chain takedown-and-republish

T0136 · Initial Access · Brandjacking

@copilot-mcp scope impersonating Copilot/MCP tooling.

T0109 · Resource Development · Publish malicious artifact

Same payload under a new name after npm takedown.

T0151 · Execution · Installation scripts

postinstall osascript / curl|zsh on macOS.

T0184 · Credential Access · Harvesting sensitive information from files

Wallets, SSH, AWS, Kubernetes.

Sources