Observed Signal · May 19, 2026 · Supply Chain Attack · Source: techcrunch · Impact: 3/5 · Sentiment: Negative
Supply-chain attack compromises dozens of open-source packages
Cybersecurity researchers reported a large ongoing supply-chain attack that has compromised hundreds of open-source package versions across dozens of projects. StepSecurity and SafeDep warned that attackers hijacked a developer account and pushed more than 630 malicious versions spanning 317 npm packages in roughly 20 minutes. The malicious updates aim to harvest credentials — including from password managers — and to propagate further. Affected projects include Antv (a library associated with Alibaba); JFrog Security said some malicious updates were published via GitHub. Researchers call the campaign “Mini Shai-Hulud”; it follows an earlier wave that compromised the TanStack library and led to the computers of two OpenAI employees being breached. The incident underscores ongoing risks in open-source dependency security and rapid downstream exposure for developers and organizations that consume compromised packages.
Widespread compromise of popular open-source dependencies creates credential-theft risk and rapid downstream exposure for developers and companies across industries.
Track OpenAI Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- StepSecurity and SafeDep alerted to a large npm supply-chain attack targeting open-source projects.
- SafeDep reported attackers released over 630 malicious versions across 317 packages in about 20 minutes.
- Attackers aim to steal credentials, including those stored in password managers, and to spread malware downstream.
- Affected packages include Antv (a library made by Alibaba); JFrog Security reported malicious updates appearing on GitHub.
- Researchers labeled the broader campaign “Mini Shai-Hulud”; a prior wave compromised TanStack and impacted OpenAI employees.
Connected Companies & Entities
1 Entity mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
144 Mastra npm Packages Compromised in Supply-Chain Attack
In June 2026, attackers hijacked an npm contributor account (ehindero) and mass-published malicious versions of 144 packages in the @mastra namespace in an incident dubbed the easy-day-js supply-chain attack. Security researchers from JFrog, SafeDep, Socket and StepSecurity jointly uncovered the breach. Mastra is a popular open-source JavaScript/TypeScript framework used for AI application development, so the compromise risks propagating malicious code into many downstream projects and AI workloads. Researchers recommend immediate automated dependency audits, removal or rollback of affected packages, credential rotation, enforcing multi-factor authentication for publishers, and continuous monitoring via supply-chain scanning tools (e.g., JFrog Xray, Socket, SafeDep). The incident underscores account-level contributor access as a major attack surface for npm and similar registries, and calls for stronger registry-level publisher controls and provenance checks.
OpenAI: Hackers Stole Data After Supply-Chain Attack
OpenAI confirmed on May 14, 2026 that two employees’ devices were impacted by a recent supply‑chain attack that abused a compromised open‑source project (TanStack). After investigation, OpenAI said attackers accessed a limited subset of internal source code repositories and stole “only limited credential material,” but found no evidence that user data, production systems or intellectual property were compromised. TanStack disclosed that attackers published 84 malicious npm package versions during a six‑minute window; the malicious packages were designed to steal credentials and self‑propagate. As a precaution, OpenAI is rotating digital certificates used to sign products, an action that will require macOS users to update the app. The incident is part of a broader wave of supply‑chain compromises targeting developer tooling.
North Korean Hackers Poisoned 140+ npm Packages
Microsoft attributed a supply-chain attack on the Mastra AI ecosystem to Sapphire Sleet (also tracked as BlueNoroff), in which attackers poisoned over 140 npm packages that AI coding assistants and developer tooling actively surface. The incident is notable because LLM-backed IDE assistants (e.g., Copilot, Cursor) can suggest or auto-install dependencies, allowing malicious code to reach developer machines without traditional phishing. Microsoft’s public details are limited: a state-level actor, 140+ contaminated packages, and a focus on AI-assisted development workflows. The article highlights detection gaps—npm audit relies on published CVEs, lockfiles help only post-install, and LLMs do not validate package provenance—and describes Sentinel’s SlopScan integration as a defensive pattern that extracts package names from LLM output and flags or blocks suspicious packages before installation. Publication date: 2026-06-20.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.