Topic

#npm

2 articles found

GitHub NPM Attack Exposes Indian Developers' Crypto Wallets

GitHub NPM Supply Chain Attack - Investigation Report Date: May 29, 2026 Case ID: ONCHAIN-2026-0529-002 Threat Names: Megalodon, Mini Shai-Hulud Status: Active - Ongoing Crisis A massive supply chain attack campaign dubbed "Megalodon" and "Mini Shai-Hulud" is targeting GitHub tokens and NPM packages

#github#npm#crypto wallets#supply chain attack#india tech

· · Dev.to

npm Supply Chain Breach: India's Cybersecurity Response

In May 2026, attackers compromised 42 TanStack packages by poisoning a GitHub Actions build cache through a pull request. The malicious code exfiltrated AWS credentials, GCP tokens, Kubernetes secrets, and SSH keys from every developer who installed the affected versions. This was not an isolated in

#npm#supply chain#cybersecurity#india#open-source