pwn.watch: Infostealer incident updates

[critical] SubQuery @subql/common 5.8.3 published with credential stealer + backdoor

Thu, 22 Oct 2026 10:04:00 GMT

On Oct 5 2026 @subql/common 5.8.3 was published to npm through SubQuery's own GitHub Actions trusted publisher, after a short-lived branch changed the release step to swap the built package for a tarball downloaded from ci-artifacts.dev. The payload ran on install (postinstall) and on import, stole CI/cloud/GitHub/npm/Kubernetes/Vault/SSH and AI-tool credentials, offered a reverse shell, and with a workflow-scoped token tried to push a secret-dumping workflow. It was live about 50 minutes; 5.8.2 is the safe version. Many @subql packages accept 5.8.3 through their version ranges.

Status: closed · Patch: patched · Fixed in: @subql/common 5.8.2 (npm 'latest')

Latest updates:

2026-10-10: SubQuery maintainer: compromised token deleted, security review started. (source)
2026-10-06: GMO Flatt Security publishes payload analysis and response guidance. (source)
2026-10-05T11:56Z: Malicious @subql/common 5.8.3 published via the repo's GitHub Actions trusted publisher (canary 5.8.3-onf-rt1 published ~32 min earlier). (source)

CVEs: GHSA-9333-3c4x-x3h5, MAL-2026-17571

[critical] Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS

Wed, 26 Nov 2025 00:00:00 GMT

A second wave of the Shai-Hulud worm ran in npm preinstall scripts (setup_bun.js), stole credentials with TruffleHog and pushed them to public GitHub repos, then republished packages with any npm tokens it found. Datadog counted 796 backdoored packages with 20M+ weekly downloads; Wiz saw 25,000+ attacker repos.

Status: closed · Patch: patched · Fixed in: Malicious versions unpublished; use versions published after 2025-11-24 per each vendor

Latest updates:

2025-11-26: GitHub privatizes malicious repos; public count drops to ~300 (source)
2025-11-26: PostHog publishes its post-mortem (source)
2025-11-24: First compromised package published (03:10 UTC) (source)

[critical] Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike

Tue, 23 Sep 2025 00:00:00 GMT

A worm spread through npm by stealing maintainers' npm and GitHub tokens with TruffleHog, then republishing their packages with a malicious bundle.js postinstall. It created shai-hulud GitHub workflows to exfiltrate secrets and made private repos public. CISA counted more than 500 affected packages, including @ctrl/tinycolor and several @crowdstrike packages.

Status: closed · Patch: patched · Fixed in: Malicious versions removed from npm; upgrade to versions published after the incident

Latest updates:

2025-09-23: CISA alert: widespread supply chain compromise impacting npm (500+ packages) (source)
2025-09-16: Largest burst, nearly 100 packages, including @crowdstrike scope (source)
2025-09-15: Worm discovered; @ctrl/tinycolor and ~40 packages found compromised (source)

[critical] s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed

Fri, 29 Aug 2025 00:00:00 GMT

Attackers abused a GitHub Actions injection bug in nrwl/nx to steal its npm token and published malicious nx and @nx/* versions for about four hours. The postinstall script used local AI CLIs (Claude, Gemini, Q) to find secrets and pushed them to public s1ngularity-repository repos. A second phase used stolen GitHub tokens to make 5,500+ private repos public.

Status: closed · Patch: patched · Fixed in: Malicious versions removed from npm (see GHSA-cxm3-wv7p-598c)

Latest updates:

2025-08-28/29: Second phase: 5,500+ private repos of 400+ users/orgs made public with stolen tokens (source)
2025-08-27: GitHub disables attacker-created s1ngularity repositories (09:00 UTC) (source)
2025-08-26: Malicious nx 21.5.0 and others published; npm removes them and revokes tokens that evening (source)

[high] eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313)

Tue, 22 Jul 2025 00:00:00 GMT

A maintainer was phished through the typosquat domain npnjs.com. The attacker published malicious eslint-config-prettier versions whose install script ran node-gyp.dll on Windows, dropping the Scavenger infostealer. eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall and later the 'is' package were also hit.

Status: closed · Patch: patched · Fixed in: Malicious versions removed; use other eslint-config-prettier versions (see CVE record)

Latest updates:

2025-07-22: Malicious 'is' package versions found in the same campaign (source)
2025-07-18: Malicious eslint-config-prettier versions published after maintainer phishing (source)

CVEs: CVE-2025-54313

[critical] Snowflake customer accounts raided with infostealer credentials (Ticketmaster, AT&T and others)

Fri, 12 Jul 2024 00:00:00 GMT

A financially motivated group Mandiant tracks as UNC5537 logged into Snowflake customer accounts using credentials stolen by infostealer malware, some dating back to 2020, on accounts without MFA or network allow lists. It then stole data and extorted the victims. Mandiant and Snowflake notified about 165 potentially exposed organizations. Victims included Ticketmaster/Live Nation and AT&T, which said call and text records of nearly all its cellular customers were taken. Mandiant found no breach of Snowflake's own enterprise environment.

Status: closed · Patch: no-fix-needed

Latest updates:

2024-07-12: AT&T says call and text records of nearly all cellular customers were stolen from its Snowflake workspace (source)
2024-06-10: Mandiant publishes its UNC5537 report: about 165 organizations notified (source)
2024-05-31: Live Nation 8-K confirms the Ticketmaster data theft; the database was hosted on Snowflake (source)

[critical] CircleCI breach: rotate every secret

Fri, 13 Jan 2023 00:00:00 GMT

Malware on a CircleCI engineer's laptop stole a 2FA-backed SSO session. The attacker then exfiltrated customer environment variables, tokens and keys along with the encryption keys, so CircleCI told every customer to rotate all secrets stored in the platform.

Status: closed · Patch: no-fix-needed

Latest updates:

2023-01-13: Incident report: malware stole an engineer's SSO session in December 2022; customer data and encryption keys were exfiltrated (source)
2023-01-04: CircleCI tells all customers to rotate every secret stored in CircleCI (source)