Poisoned Pipeline / Incidents / AS171

AS171 · 2026-02

Rspack supply chain attack

npmGit / GitHub

Socket: Rspack supply-chain attack (compromised build/bundler package).

Mapped techniques

• T0121 Compromised legitimate artifact
• T0109 Publish malicious artifact

supply-chain campaign

Sources

• https://socket.dev/blog/rspack-supply-chain-attack