[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 12 sources · 13 days · First seen · Last updated

Software supply-chain attacks targeting developers

Overview

Cybersecurity researchers have identified multiple supply-chain attacks targeting developer environments through malicious packages on the npm and PyPI registries.

An initial campaign named NEBULA utilized npm packages masquerading as an AI software development kit to distribute the KNTRAT Windows remote-access trojan. This malware allowed attackers to remotely control desktops, execute commands, and access camera and microphone functions.

Subsequent attacks targeted developer credentials. In the npm ecosystem, a malicious release of the tensorlake package, pushed under a maintainer’s identity, sought to steal npm and GitHub tokens and included a payload capable of deleting a user’s home directory. Concurrently, trojanized versions of the LiteLLM package were identified on PyPI, GHCR, and Docker Hub. These versions utilized a credential stealer named ‘privcollect’ to harvest and exfiltrate sensitive data from browsers, cloud providers, and AI services to attacker-controlled domains.

Entities

npm · CloudSEK · NebulaAI · TrendAI · PyPI

Timeline

  1. [TECHNOLOGY] 9 sources
    Malicious npm and PyPI package releases target developer credentials

    Malicious releases of tensorlake on npm and LiteLLM on PyPI have been identified, targeting developer credentials, cloud secrets, and AI tool tokens through supply chain attacks.

  2. [TECHNOLOGY] 4 sources
    npm packages masquerading as AI tools deliver Windows malware

    Malicious npm packages posing as NebulaAI developer tools have been used to distribute a Windows remote-access trojan targeting developer workstations.

Sources

cnmo.com · csoonline.com.au · cybernoz.com · dev.to · gigazine.net · hackernews.com · iotinsider.com · ithome.com · sourcetrail.com · thehackernews.com · theregister.com · wiz.io