Poisoned Pipeline / Incidents / AS169

AS169 · 2026-02

Toptal GitHub org hijack 10 malicious packages

npmGit / GitHub

Socket: Toptal GitHub organization hijacked; 10 malicious packages published.

Mapped techniques

• T0113 Compromised user account
• T0109 Publish malicious artifact

supply-chain campaign

Sources

• https://socket.dev/blog/toptal-s-github-organization-hijacked-10-malicious-packages-published