Topic

Developer Credential Theft

1 story tagged Developer Credential Theft, newest first.

A trusted golden seal attached to a cracked pod spreading dark tendrils through a software supply chain.

Aug 5, 2026, 4:12 PMCybersecurity

Shai-Hulud npm Worm Used Valid Provenance to Poison 868 Packages

A hijacked GitHub account let the Shai-Hulud npm worm gain valid provenance, poison hundreds of packages, and expose a software supply-chain trust gap.

VentureBeat