RuntimeRebel — #Malicious PackagesCybersecurity articles tagged #Malicious Packages on RuntimeRebel.https://runtimerebel.comGitHub Dependabot 3-Day Cooldown: Mitigating Supply Chain Attackshttps://runtimerebel.com/blog/github-dependabot-3-day-cooldown-mitigating-supply-chain-attackshttps://runtimerebel.com/blog/github-dependabot-3-day-cooldown-mitigating-supply-chain-attacksGitHub introduces a 3-day cooldown for Dependabot to prevent the rapid adoption of malicious packages, enhancing supply chain security for developers.Mon, 27 Jul 2026 11:25:20 GMTGitHubDependabotSupply Chain SecurityMalicious PackagesOpen SourceN. Korea-Linked npm Packages Mimic Rollup Polyfills for Data Thefthttps://runtimerebel.com/blog/n-korea-linked-npm-packages-mimic-rollup-polyfills-for-data-thefthttps://runtimerebel.com/blog/n-korea-linked-npm-packages-mimic-rollup-polyfills-for-data-theftNorth Korea-linked actors use malicious npm packages ('rollup-packages-polyfill-core', 'rollup-runtime-polyfill-core') to steal developer secrets, mimicking Rollup…Fri, 03 Jul 2026 17:27:44 GMTNPMRollupSupply Chain AttackNorth Korea LinkedDeveloper SecretsMalicious PackagesGlassWorm Malware Takedown: Disruption of Developer Supply Chain C2https://runtimerebel.com/blog/glassworm-malware-takedown-disruption-of-developer-supply-chain-c2https://runtimerebel.com/blog/glassworm-malware-takedown-disruption-of-developer-supply-chain-c2CrowdStrike, Google, and Shadowserver disrupt the GlassWorm malware C2 infrastructure, halting a persistent developer-focused supply chain attack campaign.Wed, 27 May 2026 13:20:01 GMTGlassWormCrowdStrikeC2 DisruptionSupply Chain AttackMalicious PackagesShai-Hulud Campaign: TeamPCP Targets Open-Source Supply Chainhttps://runtimerebel.com/blog/shai-hulud-campaign-teampcp-targets-open-source-supply-chainhttps://runtimerebel.com/blog/shai-hulud-campaign-teampcp-targets-open-source-supply-chainAnalysis of the Shai-Hulud campaign by TeamPCP, detailing their open-source supply chain attacks, TTPs, and critical mitigation strategies.Tue, 26 May 2026 20:47:57 GMTTeamPCPShai HuludSupply Chain AttackOpen Source SecurityNPMPyPIMalicious PackagesShai-Hulud Infostealer Surfaces in Malicious npm Package Campaignhttps://runtimerebel.com/blog/shai-hulud-infostealer-surfaces-in-malicious-npm-package-campaignhttps://runtimerebel.com/blog/shai-hulud-infostealer-surfaces-in-malicious-npm-package-campaignLeaked Shai-Hulud malware is targeting Node.js developers via malicious npm packages, exfiltrating sensitive data and credentials to Telegram-based C2.Mon, 18 May 2026 20:37:20 GMTNPMShai HuludInfostealerSupply Chain AttackMalicious PackagesRubyGems Suspends Registrations Due to Malicious Package Influxhttps://runtimerebel.com/blog/rubygems-suspends-registrations-due-to-malicious-package-influxhttps://runtimerebel.com/blog/rubygems-suspends-registrations-due-to-malicious-package-influxRubyGems maintainers suspended new user registrations after detecting an automated attack involving over 500 malicious packages targeting platform resources.Wed, 13 May 2026 09:09:56 GMTRubyGemsOpen Source SecurityPackage ManagerSupply Chain SecurityMalicious PackagesRubyGems Signups Suspended Amid Massive Malicious Package Attackhttps://runtimerebel.com/blog/rubygems-signups-suspended-amid-massive-malicious-package-attackhttps://runtimerebel.com/blog/rubygems-signups-suspended-amid-massive-malicious-package-attackRubyGems halts new registrations after hundreds of malicious packages flood the registry, signaling a major supply chain security threat for Ruby developers.Tue, 12 May 2026 20:37:55 GMTRubyGemsSupply Chain AttackRuby SecurityMalicious PackagesRegistry SecurityOfficial SAP npm Packages Compromised in TeamPCP Supply Chain Attackhttps://runtimerebel.com/blog/official-sap-npm-packages-compromised-in-teampcp-supply-chain-attackhttps://runtimerebel.com/blog/official-sap-npm-packages-compromised-in-teampcp-supply-chain-attackAttackers compromised official SAP npm packages to exfiltrate developer credentials and tokens. Learn how to detect and remediate this supply chain threat.Thu, 30 Apr 2026 00:50:55 GMTSAPNPMTeamPCPCredential TheftMalicious PackagesCheckmarx Supply Chain Attack: GitHub Data Exfiltration Confirmedhttps://runtimerebel.com/blog/checkmarx-supply-chain-attack-github-data-exfiltration-confirmedhttps://runtimerebel.com/blog/checkmarx-supply-chain-attack-github-data-exfiltration-confirmedCheckmarx confirms data exfiltration from its GitHub environment following a malicious code publication. Learn about the TTPs and mitigation strategies.Wed, 29 Apr 2026 12:42:21 GMTCheckmarxGitHubSupply Chain AttackData BreachMalicious PackagesAI-Driven Package Hallucination: A New Frontier in Supply Chain Exploitationhttps://runtimerebel.com/blog/ai-driven-package-hallucination-a-new-frontier-in-supply-chain-exploitationhttps://runtimerebel.com/blog/ai-driven-package-hallucination-a-new-frontier-in-supply-chain-exploitationAnalysis of a novel attack vector where autonomous AI agents facilitate malicious package injection through dependency confusion and LLM hallucinations.Mon, 23 Feb 2026 16:26:52 GMTAI SecuritySupply Chain AttackMalicious PackagesDependency ConfusionLLM Hallucination