Software supply chain vulnerabilities identified in npm and GitHub

Security researchers have identified significant vulnerabilities in software supply chains involving the npm registry and GitHub. A malicious version of the Tensorlake SDK (version 0.5.144) was discovered to have been injected into the project's main branch and published through its standard release process. This compromised version was capable of searching for developer and cloud service credentials. While the package has been removed from the public registry, existing installations on local machines and projects remain at risk.

Separately, a vulnerability dubbed ‘SlugFest’ was discovered in GitHub’s ‘Trusted Publishing’ mechanism, which affects over 1,500 software packages. Researchers from Bloom Security found that the system relied on human-readable slugs rather than permanent IDs to validate repositories. This allowed attackers to claim abandoned project names and issue malicious updates to legitimate packages. GitHub has since updated its validation rules, implementing a 48-hour window for new trusted publishing configurations to be validated by a successful package upload.