Record · linuxsecurity.com
SubQuery Supply Chain Attack Targeted Cloud and CI Credentials
linuxsecurity.com · 6 October 2026 · 4 min read
A post on linuxsecurity.com, published 6 October 2026, has not been cited by any blog yet (corpus.blog, measured 11 October 2026).
A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.
0blogs citing
| Period | Blogs | Links |
|---|---|---|
| All time | 0 | 0 |
| Last 90 days | 0 | 0 |
| Last 30 days | 0 | 0 |
| Last 7 days | 0 | 0 |
| Words blogs link it with | 0 |
|---|---|
| External links | 2 |
| Length | 892 |
Cited by
No blog we hold has cited this post yet.
Links from this post
Link
Host
On October 5, 2026, StepSecurity analyzed @subql/common@5.8.3 on npm and identified a hidden payload that collects credentials and supports remote shell access. It starts during installation and when the package is imported. The code targets developer workstations and CI environments, including GitHub Actions runners and accessible cloud services." name="description"/><meta content= Read at stepsecurity.io (opens in a new tab)
Elsewhere on linuxsecurity.com (4)
linuxsecurity.com
Similar posts
18 Sept 2026
AsyncAPI supply chain compromise: npm packages backdoored via GitHub Actions "pwn request" (July 2026)
Chainguard Blog
14 Jul 2026
6 Aug 2026
Why npm dependencies are a bigger security risk than your code
blog.logrocket.com
30 Jun 2026
30 Jun 2026
7 Oct 2026
28 Jul 2026
New npm Worm Hits 400+ Packages Including Keyv, Cachable
opensourcemalware.com
5 Aug 2026
Why a Supply Chain Attack Targets Your Credentials
GitGuardian Blog
17 Sept 2026
Inside the AsyncAPI npm supply chain attack
cloudsmith.com
14 Jul 2026
Something wrong here? Report a problem