Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
npm matched never-used trusted publishing configs by repository name, so a reclaimed repo name could publish your package. Unvalidated configs now expire after 48 hours.
npm added stage-only granular tokens on 18 September 2026 and OIDC dist-tag permissions on 30 September. Here is how to move CI off direct-publish tokens before the January 2027 target.
One operator has shipped Windows malware through npm since 2023. After takedowns in late September, the MALFEX loader moved into a native addon that runs on require, with no install script.
On 5 October 2026 one RubyGems account published 42 crypto-themed gems in about an hour. A fake native extension opened a reverse shell at install time, but only on real developer machines.
Trojanized Composer themes for OphimCMS and KKPhim injected JavaScript into streaming sites. Visitors on unpatched iPhones got a WebKit-to-kernel chain that stole wallet seeds.
On 23 September 2026 an OpenClaw memory plugin on npm and the MemoryOS package on PyPI shipped a Go credential stealer called sckit. It ran on import, and on npm it also saw user prompts.
actions-cool/issues-helper and maintain-one-comment were disabled in May 2026 after a Mini Shai-Hulud compromise. On 16 September they were re-enabled with tags still pointing at the payload.
A compromised maintainer account rewrote Git history in the Visanduma repositories. Because Packagist serves dev branches straight from Git, visanduma/nova-two-factor dev-main carried the malware.
CISA added three self-hosted Artifactory auth flaws to KEV in September, including CVE-2026-82329, which gives unauthenticated attackers admin by default. Versions and fixes inside.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
