Software Supply Chain Threats Targeting Open-Source Ecosystems and Developer Tooling

Open-source software supply chain risk continued to escalate, with reporting citing 454,600+ newly identified malicious packages across major repositories (including PyPI, npm, Maven Central, NuGet, and Hugging Face) and tactics ranging from credential theft to multi-stage attacks and even early self-replicating package malware. The activity reportedly concentrated heavily in npm, including high-volume “ecosystem flooding” (e.g., single accounts publishing 150,000+ malicious packages in days) and hijacking of trusted projects, exploiting developer reliance on superficial trust signals such as package names, READMEs, and download counts.

Separately, researchers disclosed “PackageGate” vulnerabilities in JavaScript package managers (npm, pnpm, vlt, and Bun) that can bypass common post-incident defenses—namely --ignore-scripts and lockfile integrity—enabling malicious code execution via compromised dependencies. Koi Security reported six issues; pnpm, vlt, and Bun shipped fixes, while npm reportedly treated the behavior as expected. In parallel, threat actors abused GitHub’s fork architecture to distribute a spoofed GitHub Desktop installer promoted via search ads; execution deployed HijackLoader and established persistence via a scheduled task, underscoring that supply chain threats extend beyond package registries into developer tooling distribution channels.