Between early June and July 14, 2026, four distinct supply chain attacks targeted npm and PyPI ecosystems. The Shai-Hulud/Miasma worm spread to PyPI via a Python startup file (.pth) mechanism, infecting over 100 packages total. Fake payment SDK packages (typosquatting PaySafe, Skrill, Neteller) harvested CI secrets like AWS keys and GitHub tokens. A stolen npm publishing token poisoned Jscrambler and its plugins with an IronWorm variant that targeted AI coding assistant credentials. Finally, a GitHub Actions 'pwn request' attack hijacked AsyncAPI's CI pipeline, backdooring packages with 2.25M+ weekly downloads — and the malicious releases carried valid Sigstore/SLSA provenance because the attacker controlled the CI identity. All four attacks shared one goal: stealing credentials from developer environments and build pipelines. npm v12 disabled install scripts by default, but attackers quickly pivoted to import-time execution, bypassing that protection.
