Malicious npm Package Steals GitHub, Cloud, and CI/CD Secrets and Spreads to Other Packages
Tue Sep 01 2026
Development
Malware
Open Source
Software
gbhackers.com
A supply-chain compromise affecting the popular npm package @7nohe/openapi-react-query-codegen is exposing developer workstations and CI/CD runners to a credential-stealing, self-propagating payload. On August 28, 2026, attackers published ten malicious versions across every maintained release branch of the OpenAPI-to-TanStack Query code generator, which records roughly 150,000 weekly downloads. The releases appeared in two publishing waves approximately […]
The post Malicious npm Package Steals GitHub, Cloud, and CI/CD Secrets and Spreads to Other Packages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.