Tag: opensearch

1 Attack Reports | 0 Vulnerabilities

Attack reports

Typosquatted npm packages used to steal cloud and CI/CD secrets

A supply chain attack targeting the npm ecosystem was identified involving 14 malicious packages published under the alias vpmdhaj. These packages typosquat well-known OpenSearch, ElasticSearch, and DevOps libraries, executing malicious payloads through npm lifecycle hooks during installation. The …
typosquatting
npm
supply-chain-attack
2026-05-29
elasticsearch
opensearch
Published: May 29, 2026
Downloadable IOCs: 4
Click here to see more Attack Reports