The newest Secrets & Credential Leaks resources are on the Secrets & Credential Leaks page. For a reading order instead of a date order, see the Secrets & Credential Leaks learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-07-02 2026 | 6 security settings every GitHub maintainer should enable this week beginner 4 min read Bug Bounty | Guide to six essential GitHub security settings: enable a `SECURITY.md` file and private vulnerability reporting for clear communication, turn on secret scanning with push protection to prevent leaks like those identified by GitGuardian, and leverage Dependabot and dependency review to manage vulnerable packages. Additionally, implement code scanning with CodeQL for static analysis to catch bugs such as SQL injection, and enforce branch protection on your default branch to require pull requests and approvals, significantly hardening your project against common attacks. → github.blog |
| 2026-06-28 2026 | AI Is the Newest Developer To Misunderstand Secrets In Your Git History intermediate 7 min read | Library for securing Git repositories, teaching AI coding agents like Cursor, Claude Code, and Codex how to properly handle secrets and avoid leaking them into commit history. It emphasizes rotating credentials first and using tools like `git-filter-repo` for thorough history cleanup. The library integrates with AI assistants through Agent Skills and AI hooks, enabling pre-commit scanning and real-time checks on prompts, commands, and outputs, preventing secrets from entering the repository in the first place. → blog.gitguardian.com |
| 2026-06-27 2026 | CargoWise WebTracker - The keys were in the cargo intermediate 16 min read | Library for securing CargoWise WebTracker, a logistics platform. This resource details hardcoded symmetric keys (3DES and AES-256-CBC) used for encrypting query string parameters and authentication tokens. It demonstrates how these keys enable authentication bypass via an "auto-login" feature and session persistence on handler endpoints, potentially allowing unauthorized access to sensitive shipment and booking information. → slcyber.io |
| 2026-06-25 2026 | Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets news 4 min read Supply Chain | Analysis of the compromised `codfish/semantic-release-action` GitHub Action details how an attacker used tag hijacking and a malicious `index.js` payload to steal CI/CD secrets. The injected JavaScript leverages the Miasma credential-stealing toolkit and a dead drop marker string, `thebeautifulsnadsoftime`, to achieve remote code execution on CI runners. Affected tags include `v2`, `v3`, `v4`, and `v5`. → aikido.dev |
| 2026-06-25 2026 | Hunting Leaked PyPI Tokens: 62 Live, 125 Packages Exposed intermediate 4 min read Python Supply Chain | Analysis of leaked PyPI tokens reveals 62 live tokens, capable of compromising 125 packages with approximately 25,000 monthly downloads. While GitHub's automated scanning should revoke these, many recent leaks suggest potential gaps in coverage. The research utilized the `pypitoken` Python module to decode macaroon tokens and mimicked `twine upload` behavior to verify token validity, highlighting the continued risk of supply chain attacks through exposed credentials. → blog.gitguardian.com |
| 2026-06-23 2026 | Secure non-human identities with Wiz’s newest CIEM dashboard beginner 3 min read AuthZ | Dashboard that visualizes and prioritizes risks associated with non-human cloud identities, including service accounts. It offers visibility into risky entities with high privileges or internet exposure, detects country-specific activity, and integrates with attack path analysis to identify lateral movement and data access vulnerabilities. → wiz.io |
| 2026-06-23 2026 | Monitor sensitive data [3**-** ***7] that resides in code beginner 3 min read | Library for monitoring sensitive data like PII, PHII, and PCI within codebases, pull requests, and CI/CD pipelines. Utilizing Wiz's DSPM capabilities, it helps reduce accidental data exposure, prevent compliance violations under GDPR, CCPA, PCI-DSS, and HIPAA, and establish organizational baselines. Developers and security teams can leverage the Wiz CLI or version control scanners to identify and remediate sensitive data during the development process. → wiz.io |
| 2026-06-22 2026 | Nightfall AI and Snyk unite to deliver AI-powered secrets scanning for developers news 2 min read AI | Library integration providing AI-powered secrets scanning, combining Snyk's developer security platform with Nightfall AI's data protection capabilities. This partnership aims to detect and remediate sensitive data, including API keys and credentials, across the code-to-cloud lifecycle. Nightfall AI's technology automatically identifies over 100 sensitive data types, offering context-aware detection to reduce false positives and enhance developer workflows. The integration also addresses risks associated with AI-generated code, providing tools like Snyk's DeepCode AI for vulnerability scanning. → snyk.io |
| 2026-06-20 2026 | 5 Node.js security code snippets every backend developer should know beginner 11 min read | Library offering Node.js security code snippets covering the Permissions Model for restricting resource access, exemplified by preventing command injection in packages like `pdf-image`, and input validation using Fastify JSON schemas to mitigate SSRF and HTTP parameter pollution. It also touches upon secure password hashing with Bcrypt, and integrating tools like the Snyk VS Code extension to detect vulnerable dependencies. → snyk.io |
| 2026-06-20 2026 | Threat Brief: Mitigating Large-Scale Credential Attacks beginner 4 min read | Threat brief on "FortiBleed," a large-scale credential attack campaign targeting Fortinet, MSSQL, and Sophos devices, involving password spraying, configuration extraction, and offline cracking. The brief details threat actor techniques, recommends auditing remote access logs, and provides hardening guidelines such as requiring MFA, adopting Zero Trust Architecture, changing default credentials, disabling unused accounts, and updating software. Palo Alto Networks customers can leverage product protections and consulting services to defend against these attacks. → unit42.paloaltonetworks.com |
| 2026-06-19 2026 | The full Snyk AI Security Platform, free for open source maintainers news 3 min read AI | Library offering open source maintainers free access to the Snyk AI Security Platform. This program prioritizes risk-based vulnerability management and automated remediation, including the Snyk Remediation Agent which generates validated, merge-ready fixes for Snyk Open Source and Snyk Code issues, aiming to accelerate the fixing process and combat rapidly shrinking exploit timelines. → snyk.io |
| 2026-06-18 2026 | Under the Radar: Exploring Spring Boot Actuator Misconfigurations intermediate 10 min read RCE | Library for analyzing Spring Boot Actuator misconfigurations that can expose sensitive data like environment variables and API keys, or even lead to remote code execution (RCE) through vulnerabilities like CVE-2022-22947 in Spring Cloud Gateway. It details common weaknesses such as publicly accessible heap dump files and gateway endpoints, which are prevalent in cloud environments and pose significant risks for initial access and lateral movement. → wiz.io |
| 2026-06-18 2026 | The many ways to obtain credentials in AWS intermediate 5 min read AuthN | Library detailing numerous methods for obtaining AWS credentials, including IAM role credentials via the Instance Metadata Service (IMDSv1/v2), AWS SDK credential providers (environment variables, credential files), container credential URIs for ECS/EKS, EKS Pod Identities, IRSA, IoT certificate-based authentication, IAM Roles Anywhere, Cognito's GetCredentialsForIdentity, and Datasync's certificate authentication. → wiz.io |
| 2026-06-18 2026 | Snyk Code now secures AI builds with support for LLM sources beginner 2 min read AI | Library for securing AI builds, Snyk Code now tracks data flows from LLM sources including OpenAI, HuggingFace, Anthropic, and Google. It performs taint analysis to detect untrusted data originating from LLM libraries, flagging potential vulnerabilities such as prompt injections leading to SQL injection or XSS. Any data returned from a supported LLM library is now treated as a source, ensuring developers are alerted to risks when integrating AI components. → snyk.io |
| 2026-06-18 2026 | Finding and fixing exposed hardcoded secrets in your GitHub project with Snyk intermediate 4 min read | Library for scanning Node.js projects for exposed hardcoded secrets and credentials, demonstrated with the Snyk goof project. It utilizes Snyk to identify vulnerabilities and then refactors code to leverage Doppler for centralized secret management, preventing secrets from being pushed to GitHub and enabling environment-specific configurations. The process involves adding secrets to Doppler and updating application code to use environment variables injected via the Doppler CLI. → snyk.io |
| 2026-06-17 2026 | Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History news 4 min read | Analysis of a publicly accessible ClickHouse database linked to DeepSeek, discovered by Wiz Research, reveals extensive exposure of sensitive information including over a million lines of chat history, secret keys, and backend details. This unauthenticated exposure allowed full control over database operations and potential privilege escalation, highlighting the critical risks of rapid AI adoption without corresponding infrastructure security. → wiz.io |
| 2026-06-17 2026 | GitHub Action tj-actions/changed-files supply chain attack: everything you need to know intermediate 6 min read Supply Chain | Library for identifying and mitigating the CVE-2025-30066 supply chain attack affecting the tj-actions/changed-files GitHub Action. This attack, potentially linked to reviewdog/action-setup, injected malicious code that leaked secrets from affected repositories into workflow logs. The compromise leveraged a compromised GitHub personal access token for the tj-actions bot. Mitigation involves rotating leaked secrets, removing references to the compromised action, and pinning future dependencies to specific commit hashes. → wiz.io |
| 2026-06-17 2026 | New GitHub Action supply chain attack: reviewdog/action-setup news 6 min read Supply Chain | Analysis of a GitHub Action supply chain attack targeting reviewdog/action-setup@v1 reveals a potential precursor to the tj-actions/changed-files compromise. This attack injected malicious code into CI workflows, dumping secrets from runner memory. Evidence suggests this impacted Coinbase, though their attempt was unsuccessful. Mitigation involves checking workflow logs for double-encoded base64 strings and rotating any exposed secrets, particularly custom ones. → wiz.io |
| 2026-06-17 2026 | Want to avoid a data breach? Employ secrets detection beginner 10 min read | Library for detecting secrets like API keys, passwords, and tokens in application code. It employs sophisticated patterns and regex to identify potentially exposed sensitive data, preventing data breaches. The library integrates with IDEs for real-time feedback and can be incorporated into CI/CD pipelines to fail builds upon secret detection, mitigating risks like unauthorized access, regulatory non-compliance, and loss of competitive advantage. → snyk.io |
| 2026-06-17 2026 | Extending Our Mission With Developer Endpoint Protection beginner 5 min read | Library extending ggshield for developer endpoint protection, it finds credentials on developer machines, including those accumulated in shell histories, config files, and AI agent artifacts. It employs local scanning, honeytokens for live attack detection, and integrates with enterprise deployment workflows, MDM solutions, and SIEM systems to secure the growing attack surface presented by AI coding agents like Cursor and GitHub Copilot. → blog.gitguardian.com |
| 2026-06-16 2026 | Securing Cloud Databases: Best Practices with ClickHouse and Wiz beginner 13 min read | Library for securing ClickHouse databases, this resource details best practices and out-of-the-box security controls in light of incidents like the Deepseek AI breach. It highlights the importance of TLS encryption, administrator account authentication, and strict authorization policies, addressing misconfigurations such as publicly exposed instances without restrictions and default users without passwords. The library also covers ClickHouse's built-in features like RBAC and provides guidance to prevent data exposure in cloud environments. → wiz.io |
| 2026-06-16 2026 | Gitguardian Agent Skills: Secret Detection and Remediation For AI-Assisted Development beginner 9 min read AI | Library of open-source GitGuardian Agent Skills designed to teach AI coding assistants secret detection and remediation workflows. These skills provide agents with playbooks for using the `ggshield` CLI and GitGuardian MCP server, covering tasks like scanning repositories for secrets, creating decoy credentials with honeytokens, auditing local machines, checking for leaked secrets using HasMySecretLeaked, and installing Git hooks to prevent secrets from entering history. The skills translate developer concerns into actionable security steps, ensuring consistent and audited security guidance within AI-assisted development environments. → blog.gitguardian.com |
| 2026-06-15 2026 | Leaking Secrets in the Age of AI beginner 8 min read AI | Survey of AI-related secret leakages in public code repositories, highlighting that AI secrets constitute a disproportional majority of findings. It identifies Python notebook (.ipynb) files as a significant source of exposed secrets due to their mixed content and execution output, and notes pervasive leaks in `mcp.json` and AI agent config files for vendors like OpenAI and Anthropic. The analysis also points out gaps in current secrets scanning industry coverage, particularly with emerging AI vendor secrets. → wiz.io |
| 2026-06-14 2026 | A new type of long-lived key on AWS: Bedrock API keys beginner 6 min read | Reference analyzing long-lived and short-lived AWS Bedrock API keys. It details how long-lived keys are tied to IAM Users, potentially bypassing existing SCPs, and over-privileged by default with the `AmazonBedrockLimitedAccess` policy. Short-lived keys are generated client-side via presigned URLs and a new `bedrock:CallWithBearerToken` API. Both key types use a bearer token in the HTTPS header, unlike the typical sigv4. The entry notes these keys have already appeared in public GitHub repositories and recommends SCPs to deny `bedrock:CallWithBearerToken` to mitigate risks. → wiz.io |
| 2026-06-14 2026 | Secrets Found. Owners Identified. Issues Fixed. intermediate 4 min read | Library for detecting, prioritizing, and remediating secrets exposure across the SDLC, combining code scanning, cloud workload analysis, and vault data with blast radius context and AI-powered fixes. It validates findings against providers like GitHub and OpenAI, maps secrets to owners, and offers AI-generated remediation guidance, integrating directly into developer workflows. → wiz.io |
| 2026-06-14 2026 | From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover beginner 7 min read AuthN | Analysis of a May 2025 SES abuse campaign reveals attackers compromising AWS access keys to escape Amazon Simple Email Service's sandbox. This involved multi-regional `PutAccountDetails` requests to gain production mode, followed by verifying attacker-owned and weakly protected legitimate domains. The campaign leveraged these to send phishing emails referencing tax forms, directing victims to credential theft sites masked by a traffic analysis service, highlighting the risks of SES misuse for large-scale phishing and monetizing leaked credentials. → wiz.io |
| 2026-06-14 2026 | Reconstructing the TJ Actions Changed Files GitHub Actions Compromise news 7 min read Supply Chain | Analysis of the tj-actions/changed-files GitHub Actions compromise details how attackers leveraged orphaned Git commits and re-pointed release tags to inject malicious code. This code, when executed within a GitHub Action workflow, interrogated process memory to extract and exfiltrate encrypted secrets, exposing them in public action logs. The attack vector highlights the risks associated with compromised CI/CD pipelines and the importance of validating the integrity of trusted third-party actions. → snyk.io |
| 2026-06-13 2026 | Old Passwords Die Hard: Abusing CREDHIST for offline credential recovery intermediate 4 min read | Tool extending DPAPISnoop to extract CREDHIST entries, enabling offline cracking of historical Windows user passwords. This new functionality integrates with Hashcat's modes 15920 and 15930, allowing attackers to recover older password material from password history chains stored in the CREDHIST file. The technique leverages the chained encryption where newer entries protect older password hashes, facilitating credential recovery and password pattern intelligence. |
| 2026-06-13 2026 | Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces news 7 min read Supply Chain | Writeup detailing a critical supply chain risk in VSCode extension marketplaces reveals over 550 validated secrets, including AI provider secrets, high-risk platform credentials for AWS and GitHub, and database secrets, leaked by publishers. Most alarmingly, over a hundred access tokens granting extension update privileges were found, potentially allowing attackers to distribute malware to hundreds of thousands of users across both VSCode and Open VSX marketplaces. The research identified dotfiles, .env files, and hardcoded credentials in source code as common leakage sources, prompting platform-level improvements and a notification campaign for impacted publishers. → wiz.io |
| 2026-06-12 2026 | Introducing Posture Issues: Transform Security Findings into Actionable Outcomes beginner 4 min read Bug Bounty | Framework for managing security debt, Posture Issues consolidate findings within a single domain like vulnerabilities or secrets, transforming unmanaged backlogs into structured remediation projects. This approach facilitates meeting compliance requirements and SLAs, tackling large volumes of non-critical findings, and consolidating remediation efforts for improved security hygiene and long-term resilience, complementing existing Risk Issues for immediate threat mitigation. → wiz.io |
| 2026-06-12 2026 | Code to Cloud Attacks: From Github PAT to Cloud Control Plane intermediate 7 min read Supply Chain | Writeup detailing threat actor techniques for exploiting compromised GitHub Personal Access Tokens (PATs) to gain unauthorized access to cloud environments. This includes discovering secrets within code using GitHub's API, executing malicious code via GitHub Actions, and exfiltrating cloud credentials. Attackers then leverage these credentials for cross-cloud lateral movement and defense evasion by deleting workflow logs. The writeup highlights risks associated with storing CSP credentials in GitHub Actions Secrets and plain-text keys in repositories, referencing supply-chain attacks like tj-actions and Shai-Hulud. → wiz.io |
| 2026-06-12 2026 | When “Private" Isn't: The Security Risk of GPT Chats Leaking to Search Engines news 3 min read AI | Analysis of ChatGPT chat indexing by Google, Bing, and DuckDuckGo in July 2025, where a discoverability feature for shared links unintentionally exposed sensitive user conversations. This event highlights risks from insecure defaults and UI consent failures in LLM platforms, mirroring past incidents with Google Bard. Mitigation strategies include disabling search engine discoverability by default, improving UI warnings, and organizational adoption of enterprise LLMs and DLP tools. → snyk.io |
| 2026-06-11 2026 | Snipping the Long Tail of Shai-Hulud 2.0 advanced 6 min read | Analysis of the Shai-Hulud 2.0 worm reveals its persistence through mechanisms like private registries, cached packages, and a lingering OpenVSX IDE extension (asyncapi-preview v1.0.1). This "long tail" of infections impacted over ⅓ of the Fortune 100, with leaked credentials remaining valid, potentially linking to the Trust Wallet $7M exploit due to shared exfiltrated GitHub and Web Store credentials, and similar naming conventions. Wiz Research "snipped the tail" by coordinating a clean OpenVSX extension update. → wiz.io |
| 2026-06-11 2026 | Hacking Moltbook: The AI Social Network Any Human Can Control intermediate 8 min read AI API Sec | Writeup of Moltbook's Supabase misconfiguration, detailing how exposed API keys allowed unauthenticated read and write access to millions of API authentication tokens, 35,000 email addresses, and private messages. The vulnerability also revealed an 88:1 agent-to-human ratio and exposed plaintext OpenAI API keys within agent conversations, echoing previous issues like the DeepSeek data leak and Base44 Authentication Bypass. → wiz.io |
| 2026-06-11 2026 | Wiz + Spotify Backstage: Security at the Developer’s Desk beginner 3 min read | Plugin for Spotify Backstage that integrates Wiz Issues and Vulnerabilities, mapping Wiz Projects to Backstage components. Developers can search findings by rule, resource, or CVE, view vulnerability counts and severity, and seamlessly jump into Wiz for deeper investigation and remediation, bringing security context directly to the developer's workflow. → wiz.io |
| 2026-06-11 2026 | npm Supply Chain Attack via Open Source maintainer compromise news 3 min read Supply Chain | Writeup detailing an npm supply chain attack where a maintainer's account was compromised via a phishing email. The attacker injected malicious code into popular npm packages, targeting crypto transactions by intercepting and modifying ETH value transfers and wallet approvals. The attack leveraged social engineering and bypassed security controls, impacting users who installed compromised package versions. Snyk provides tools like SCA and SBOM to detect and monitor affected projects, and a "Featured Zero-Day" report is available for Enterprise users. → snyk.io |
| 2026-06-11 2026 | Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack news 5 min read Supply Chain | Analysis of the Shai-Hulud npm supply chain attack, which compromised hundreds of packages including @ctrl/tinycolor and ngx-bootstrap, detailing malicious `postinstall` scripts designed to exfiltrate cloud credentials and API keys. The attack leveraged GitHub Actions for data exfiltration and persistence, with affected versions like `ngx-bootstrap` 20.0.4-20.0.6 requiring immediate remediation, secret rotation, and system rebuilding. → snyk.io |
| 2026-06-11 2026 | Compromised Rust crate onering performs code exfiltration news 3 min read Supply Chain | Analysis of a compromised Rust crate, "onering" (version 1.4.1), reveals a `build.rs` script designed for code exfiltration. This script harvests Git data, including the source code of the most recent commit, from the host project and exfiltrates it to a Sentry ingest endpoint disguised as telemetry. The compromise affects both the crates.io package and the maintainer's GitHub repository. → aikido.dev |
| 2026-06-11 2026 | You Can't Secure What You Can't See: Making Non-Human Identities Governable beginner 4 min read AuthN | Library for governing non-human identities, GitGuardian NHI Governance provides a centralized, searchable inventory of machine identities across secrets managers, CI/CD, cloud IAM, Kubernetes, and SaaS platforms. It surfaces NHIs with their source, path, environment, risk level, and ownership status, enabling continuous governance by identifying public leaks, internal leaks, cross-environment secrets, reused credentials, long-lived secrets, and overprivileged identities. This context allows teams to understand dependencies before revoking or rotating credentials, shifting from reactive incident response to proactive security. → blog.gitguardian.com |
| 2026-06-10 2026 | Keeping Secrets Out of Logs beginner 29 min read | Library of techniques for preventing sensitive data, such as API keys, PII, and passwords, from being logged. This resource details common causes of secrets appearing in logs, including direct logging, "kitchen sink" objects, and configuration changes that expose debug-level information. It emphasizes that preventing secrets in logs requires a multi-layered defense-in-depth approach rather than a single solution. |
| 2026-06-10 2026 | KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack news 7 min read Supply Chain | Writeup detailing the supply chain attack on the KICS GitHub Action by TeamPCP, which involved credential-stealing malware targeting users between March 23rd and 24th UTC. The attack, similar to a previous one on Trivy, compromised 35 tags and leveraged a compromised service account to push malicious commits. The malware exfiltrates secrets via AES-256-CBC encryption, using the same RSA public key as the Trivy incident, and introduces a new Kubernetes-focused persistence mechanism. The report also notes concurrent compromises of OpenVSX extensions, cx-dev-assist and ast-results. → wiz.io |
| 2026-06-10 2026 | Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign news 3 min read Python Supply Chain | Analysis of TeamPCP's supply chain attack targeting LiteLLM versions 1.82.7 and 1.82.8, which abuse Python's `.pth` file mechanism for stealthy persistence and exfiltrate cloud credentials, CI/CD secrets, and keys to attacker-controlled domains like `checkmarx[.]zone` and `models[litellm][.]cloud`. This attack follows TeamPCP's prior compromises of Trivy, Checkmarx GitHub Actions, and OpenVSX extensions. → wiz.io |
| 2026-06-10 2026 | Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild news 5 min read Supply Chain | Writeup detailing post-compromise activities by the TeamPCP threat actor group, following supply chain attacks on Trivy, KICS, and LiteLLM. The analysis reveals TeamPCP's use of stolen cloud credentials and secrets, validated with tools like TruffleHog, to perform internal discovery across AWS services such as IAM, EC2, and ECS. The group leverages GitHub workflows and ECS Exec for code execution and lateral movement, employing Git cloning for data exfiltration from repositories and AWS services. Observed TTPs include unusual enumeration, secret validation, and deletion of workflow logs. → wiz.io |
| 2026-06-09 2026 | Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware news 5 min read Supply Chain | Writeup of the "Mini Shai Hulud" supply chain campaign, detailing how TeamPCP trojanized SAP npm packages. The malware uses obfuscated payloads to harvest developer and CI/CD secrets from GitHub, npm, cloud providers, Kubernetes, and HashiCorp Vault. Exfiltration primarily occurs via attacker-controlled GitHub repositories, using techniques like the GraphQL API and fallback mechanisms for credential discovery. The campaign exhibits a Russian language guardrail, terminating execution if specific locale settings are detected. → wiz.io |
| 2026-06-09 2026 | 280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII news 5 min read AI | Library that detects over 280 "Leaky Skills" in the ClawHub marketplace, exposing API keys and PII. Researchers found that 7.1% of agent skills, including popular ones like `moltyverse-email` and `buy-anything`, instruct AI agents to mishandle secrets by passing them through LLM context windows and outputting them in plaintext. The library identifies vulnerabilities such as verbatim output traps, PII exfiltration, log leakage, and hardcoded placeholders, providing a defense against insecure cognitive patterns in AI agents. → snyk.io |
| 2026-06-08 2026 | The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave news 2 min read Supply Chain | Analysis of a software supply chain campaign, attributed to "TeamPCP," details the compromise of npm packages, GitHub Actions, and a VSCode extension. The malware harvests credentials, including GitHub tokens and SSH keys, using compromised packages like those in the @antv namespace and actions-cool/issues-helper, and establishes persistence via a Python backdoor at ~/.local/share/kitty/cat.py. It exfiltrates data to attacker-controlled GitHub repositories, identified by the description "niagA oG eW ereH :duluH-iahS." → wiz.io |
| 2026-06-08 2026 | Hardcoding Security into Every Commit: The Future of Snyk Secrets intermediate 5 min read | Library for detecting hardcoded secrets, designed to prevent "secret sprawl" and mitigate risks associated with AI-generated code and autonomous agents. It utilizes AI-powered, high-precision detection combining semantic and contextual analysis with custom regex. The library shifts left by integrating with IDEs and CLIs for real-time prevention, scans PR checks for merge-time detection, and offers unified reporting and ignore approval workflows within Snyk's broader AI Security Platform, addressing vulnerabilities exemplified by the ServiceNow Bodysnatcher incident. → snyk.io |
| 2026-06-08 2026 | Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers news 8 min read Supply Chain | Writeup detailing a supply chain attack on the elementary-data PyPI package, where attackers exploited a GitHub Actions script injection vulnerability to forge a malicious release. The compromised package, elementary-data==0.23.3, contained a credential-stealing payload activated by `.pth` files, targeting cloud provider secrets, SSH keys, container secrets, and cryptocurrency wallet files. This attack vector is similar to previous incidents involving the Ultralytics and LiteLLM packages. → snyk.io |
| 2026-06-08 2026 | "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages news 13 min read Supply Chain | Library for detecting the "Mini Shai-Hulud" campaign that targeted SAP's npm packages, including `mbt`, `@cap-js/db-service`, `@cap-js/sqlite`, and `@cap-js/postgres`. This campaign leveraged the Bun runtime to execute an obfuscated credential stealer, utilizing a preinstall hook and self-propagation code for autonomous npm publishing. The attack vector involved hijacking CI pipelines and lacked manual approval gates for releases. Snyk provides advisories and flags affected releases through `snyk test`. → snyk.io |
| 2026-06-08 2026 | lightning PyPI Compromise: A Bun-Based Credential Stealer in Python news 11 min read Supply Chain | Library for analyzing a supply chain compromise affecting the `lightning` PyPI package. Versions 2.6.2 and 2.6.3 contained a Bun-based credential stealer, downloading the Bun runtime and executing an obfuscated JavaScript payload that harvested GitHub OAuth/PATs, npm tokens, and probed cloud metadata services. The stealer also performed repository poisoning via GitHub's `createCommitOnBranch` mutation and employed npm tarball worm logic for self-propagation. Snyk published advisory SNYK-PYTHON-LIGHTNING-16323121 covering the incident, which involved CWE-506 and a critical CVSS 4.0 base score of 9.3. → snyk.io |