Tag: lifecycle hooks

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malicious npm packages abuse dependency confusion to profile developer environments

Microsoft Threat Intelligence identified an active supply chain attack involving malicious npm packages that employ dependency confusion techniques. Between May 28-29, 2026, a threat actor using three maintainer aliases published malicious packages across nine organizational scopes that mirror real…
obfuscation
credential theft
npm supply chain
ci/cd targeting
2026-05-30
dependency confusion
environment fingerprinting
lifecycle hooks
reconnaissance payload
Published: May 30, 2026
Downloadable IOCs: 7
Click here to see more Attack Reports