May–June 2026: at least 5 major supply-chain attacks on npm. All after the same prize — your CI/CD secrets.
- node-ipc (10M+ downloads/week) — an identical obfuscated payload across three versions.
- 33 packages via dependency confusion, tuned to harvest AWS credentials and Vault tokens.
- The Miasma worm in the
@redhat-cloud-servicesnamespace: a compromised employee account, orphan commits slipping past review, and packages shipping with valid SLSA provenance. The lesson: provenance ≠ security.
And separately: a critical hole in the Claude Code GitHub Action — prompt injection via an issue could make the agent leak ANTHROPIC_API_KEY. Patched in 2.1.128 — update.
The verdict for team leads: lockfile pinning, --ignore-scripts, runner isolation, dependency scanning. And protect your CI/CD identity — that is precisely what the attackers are after.