SubQuery @subql/common 5.8.3 published with credential stealer + backdoor
› @subql/common (npm) and downstream @subql/* packages
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Oct 5, 2026
- closed
- Oct 10, 2026
- CVEs
- 2
- sources
- 6
## summary
On Oct 5 2026 @subql/common 5.8.3 was published to npm through SubQuery's own GitHub Actions trusted publisher, after a short-lived branch changed the release step to swap the built package for a tarball downloaded from ci-artifacts.dev. The payload ran on install (postinstall) and on import, stole CI/cloud/GitHub/npm/Kubernetes/Vault/SSH and AI-tool credentials, offered a reverse shell, and with a workflow-scoped token tried to push a secret-dumping workflow. It was live about 50 minutes; 5.8.2 is the safe version. Many @subql packages accept 5.8.3 through their version ranges.
severity: Malicious package with credential theft + remote shell; live ~50 minutes; no confirmed victims published
## cve ids[2]
## affected
- @subql/common 5.8.3
- @subql/common 5.8.3-onf-rt1 (attacker canary, no payload found; 'redteam' dist-tag still points to it)
- Downstream ranges that resolve to 5.8.3, e.g. @subql/cli 6.6.3, @subql/node-core 19.3.1, @subql/query 2.25.0, @subql/node-ethereum 6.5.0
## fixed in
- @subql/common 5.8.2 (npm 'latest')
## timeline[5]
SubQuery maintainer: compromised token deleted, security review started.
sourceGMO Flatt Security publishes payload analysis and response guidance.
sourceMalicious @subql/common 5.8.3 published via the repo's GitHub Actions trusted publisher (canary 5.8.3-onf-rt1 published ~32 min earlier).
sourceStepSecurity opens security issue #3047 in subquery/subql.
sourceGitHub publishes malware advisory GHSA-9333-3c4x-x3h5; version removed from npm (~50 minutes live); 'latest' back to 5.8.2.
source
## advisories[2]
## news & write-ups[3]
- SubQuery Ecosystem Compromise: Hidden Credential Theft and BackdoorsStepSecurity · Oct 5, 2026 · write-up
- Software Supply Chain Attack on @subql/common: Overview and Response GuidanceGMO Flatt Security · Oct 6, 2026 · write-up
- [security] Malicious release @subql/common@5.8.3 (issue #3047)GitHub / SubQuery · Oct 5, 2026
## posts[1]
We have published a new blog post covering a recent software supply chain attack on the @subql/common npm package. It covers technical details of the compromised package, as well as guidance on response if affected, as well as recommendations for users to protect against supply
## notes & caveats
Closed because the malicious version was pulled within ~50 minutes, latest is 5.8.2, and SubQuery revoked the compromised token on Oct 10. SubQuery has published no post-mortem; issue #3047 is still open. Both StepSecurity and Flatt describe the payload's capabilities but no confirmed victims. Not attributed to Shai-Hulud/ChainDrop by any primary source.
