Poisoned Pipeline / Platforms / npm
npm
135 mapped incident(s) that touched this platform or registry.
Forged and timestamp-cloned commits planted a preinstall dropper in hugo-paper and mevn-cli
Git / GitHubnpmDeveloper workstation
5 mapped techniques
tensorlake 0.5.144 steals tokens, then wipes the home directory if they are revoked
npmGit / GitHubGitHub ActionsDeveloper workstationAI coding agentsVS Code / IDELinux distro / packagesWindows software
11 mapped techniques
@subql/common 5.8.3 published after a CI artifact swap
npmGitHub ActionsGit / GitHubCI/CD SaaSDeveloper workstationLinux distro / packages
8 mapped techniques
Apex Accelerator published a malicious npm coding agent and a fake audit MCP
npmmacOS softwareWindows softwareMCPAI coding agentsGit / GitHubVS Code / IDEDeveloper workstation
7 mapped techniques
Seven fake NebulaAI npm packages drop a Windows KNTRAT at install
npmWindows softwareDeveloper workstation
5 mapped techniques
testmetest npm names ship a Miasma-family worm that wipes the home directory if a stolen GitHub token is revoked
npmPyPIRubyGemsGit / GitHubGitLabGitHub ActionsDeveloper workstationAI coding agentsMCPVS Code / IDELinux distro / packagesmacOS softwareWindows software
10 mapped techniques
TeamPCP DUSTMAKER AI workspace poisoning
npmGitHub ActionsAI coding agentsMCPGit / GitHubVS Code / IDE
5 mapped techniques
PhantomRaven hidden HTTP npm dependencies
npmCircleCIGit / GitHubGitLabGitLab CIJenkinsPyPI
5 mapped techniques
MALFEX npm campaign, including a native imgdecode loader with no install script
npmWindows softwareGit / GitHubDeveloper workstation
6 mapped techniques
GHAPPIER loader via @dforge-core/dforge-mcp trusted publishing
npmMCPGit / GitHubGitHub Actions
7 mapped techniques
VHX Harvester panel ran npm typosquat recon into a vast.ai GPU-cloud intrusion
npmLinux distro / packagesAI coding agents
5 mapped techniques
DirtyBlanket fake Express/React packages spread a self-propagating Linux worm
npmLinux distro / packagesGit / GitHubAURCodeberg
10 mapped techniques
Keyv / Cacheable ChainDrop worm
npmGitHub ActionsDeveloper workstationAI coding agentsKubernetes
8 mapped techniques
Hades .pth and AI-assistant config persistence
npmPyPIAI coding agentsLinux distro / packagesmacOS softwareMCPWindows softwareDeveloper workstation
4 mapped techniques
StubMaker RubyGems (and npm) Windows infostealer
RubyGemsnpmGit / GitHubLinux distro / packagesmacOS softwareWindows software
5 mapped techniques
Unclaimed packages in official llms.txt files
npmPyPIAI coding agentsCDN / web assets
5 mapped techniques
BRIDGEHEAD npm typosquats jump WSL to a Windows wallet stealer
npmWindows softwareLinux distro / packagesGit / GitHub
4 mapped techniques
@copilot-mcp/apex macOS infostealer republish
npmmacOS softwareMCPGit / GitHubKubernetesVS Code / IDE
4 mapped techniques
@mastra scope poisoned via typosquat easy-day-js
npmAI coding agentsGit / GitHubLinux distro / packagesmacOS softwareDeveloper workstation
6 mapped techniques
Polymarket fake-bot and wallet-key npm campaign
npmGit / GitHubDocker / containers
4 mapped techniques
TanStack Mini Shai-Hulud (CVE-2026-45321)
npmGitHub ActionsAI coding agentsVS Code / IDEDeveloper workstation
18 mapped techniques
175 npm packages hosting phishing infrastructure
npmCDN / web assetsGit / GitHub
2 mapped techniques
Typosquat npm packages backdoor Claude Code SessionStart
npmAI coding agentsLinux distro / packagesGit / GitHub
3 mapped techniques
GlassWorm across GitHub, npm, Open VSX, VS Code, Python
Git / GitHubnpmVS Code / IDEPyPIBrowser extensions
4 mapped techniques
Trojanized fork martinez-polygon-clipping-tony
npmGit / GitHubWindows software
3 mapped techniques
Fake corepack.org infostealer and proxyware
npmWindows softwareInstaller / update channel
4 mapped techniques
react-refresh-update Meta library impersonation
npmGit / GitHubWindows software
3 mapped techniques
PolinRider (DPRK) Git-to-registry jump
Git / GitHubGo modulesPackagist / ComposernpmVS Code / IDE
6 mapped techniques
npm packages hijack Cursor on macOS
npmmacOS softwareVS Code / IDEGit / GitHubWindows software
3 mapped techniques
Named npm malware families (Skeleton Squad, Skuld, Quasar, FezBox, Koishi)
4 mapped techniques
Sha1-Hulud: The Second Coming
npmGitHub ActionsGit / GitHubLinux distro / packagesWindows softwareDeveloper workstation
4 mapped techniques
Telegram, Discord, and WhatsApp-developer malware packages
npmPyPIRubyGemsBrowser extensionsCDN / web assets
4 mapped techniques
Shai-Hulud first wave (@ctrl/tinycolor)
npmGitHub ActionsGit / GitHubAI coding agentsDeveloper workstation
6 mapped techniques
Registry abuse, starjacking, OAST, and LLM-developer targeting
npmPyPIGit / GitHubAI coding agentsBrowser extensionsCDN / web assetsRubyGems
3 mapped techniques
Nx s1ngularity (stolen npm token via Actions injection)
npmGitHub ActionsAI coding agentsCI/CD SaaSGit / GitHubDeveloper workstation
8 mapped techniques
eslint-config-prettier phishing (npnjs.com) and node-gyp.dll
npmWindows softwareDeveloper workstation
4 mapped techniques
DPRK Contagious Interview (BeaverTail / npm + git)
npmPyPIGit / GitHubVS Code / IDE
6 mapped techniques
Stolen Heroku and Travis CI OAuth tokens cloned private GitHub repos
CI/CD SaaSTravis CIGit / GitHubnpm
3 mapped techniques