NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks (github.com) 2 points by lateos-ai 3mo ago ↗ HN
[–] lateos-ai 3mo ago ↗ Detection validation on three real-world campaigns from June 2026: - @redhat-cloud-services Miasma (32 packages) - TanStack Mini Shai-Hulud (84 versions) - Axios Backdoor (transitive injection)Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.
1 comment
[ 2.8 ms ] story [ 30.4 ms ] threadDetectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.