--- title: "npm supply chain attack hits 502 packages, Google API keys linger 23 minutes after deletion" url: https://daily.dev/posts/npm-supply-chain-attack-hits-502-packages-google-api-keys-linger-23-minutes-after-deletion-bntdx4fqi source_url: https://daily.dev/posts/npm-supply-chain-attack-hits-502-packages-google-api-keys-linger-23-minutes-after-deletion-bntdx4fqi type: freeform source: "Backend Digest" published: 2026-05-22T04:18:49.907Z updated: 2026-05-22T04:19:10.606Z tags: ["security", "gcp", "npm", "opentelemetry"] reading_time: 6 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # npm supply chain attack hits 502 packages, Google API keys linger 23 minutes after deletion **[Backend Digest](https://daily.dev/sources/backend_digest)** · 6 min read · 0 upvotes · 0 comments ## Summary A curated security and developer news digest covering multiple major incidents and releases. The Mini Shai-Hulud npm supply chain campaign has now compromised 502 packages across npm, PyPI, and Composer, with the Nx Console breach enabling access to ~3,800 GitHub internal repos and a $50K ransom demand. Google API keys remain valid for up to 23 minutes after deletion, a behavior Google declined to fix. A CVSS 10.0 RCE vulnerability in Cisco Secure Workload requires immediate patching with no workaround available. OpenTelemetry officially graduated as a CNCF project with 12,000+ contributors. Additional items include GitLab 19.0, Node.js 24.16.0 LTS, an 18-year-old NGINX heap buffer overflow, Modal's $355M Series C, and a Fediverse LD-Signatures vulnerability. ## Content **TLDR:** A supply chain campaign called Mini Shai-Hulud has now compromised 502 packages across npm, PyPI, and Composer, with the Nx Console breach serving as the entry point for a 3,800-repo GitHub internal breach. Separately, researchers confirmed Google API keys stay valid for up to 23 minutes after deletion, with Google declining to fix it. OpenTelemetry officially graduated as a CNCF project today. Modal closed a $355M Series C at a $4.65B valuation. --- ## npm supply chain attack: 502 packages, 3,800 GitHub repos The Mini Shai-Hulud campaign has escalated. The @antv ecosystem was the initial vector — 323 packages compromised — but the blast radius now spans 502 unique packages across npm, PyPI, and Composer, hitting TanStack, Bitwarden CLI, and Nx Console. The Nx Console compromise was the entry point for a breach of roughly 3,800 GitHub internal repositories, with the attacker group Team PCP demanding $50,000 for the stolen data. npm responded by invalidating all granular access tokens with write access that bypass 2FA, and launched a staged publishing feature requiring MFA-verified human approval before a package goes live. Critics are right to note that revoking already-stolen credentials doesn't close the underlying attack vectors — and attackers have already shown they can hijack Trusted Publishing workflows directly. ## Google API keys keep working after you delete them Security researchers tested what happens when you delete a Google API key expecting immediate protection. The answer: nothing happens for a while. Across 10 trials, the median revocation window was around 16 minutes, with a maximum of 23 minutes. The same delay affects keys scoped to BigQuery, Maps, and Gemini. Google Service Account keys revoke in about 5 seconds by comparison. Google closed the vulnerability report as "won't fix," citing eventual consistency as a known system property. The practical risk is real: an attacker holding a leaked key can keep making authenticated requests during that window, including dumping Gemini-uploaded files and cached conversations. Treat key deletion as a 30-minute operation and monitor GCP API traffic during that window. ## Cisco Secure Workload: CVSS 10.0, no workaround A maximum-severity vulnerability (CVE-2026-20223) in Cisco Secure Workload's on-premises deployment lets unauthenticated remote attackers gain site admin privileges by sending a crafted HTTP request to an internal REST API endpoint. No authentication required, no workarounds available — patching is the only fix. Affected versions are 3.10 (upgrade to 3.10.8.3) and 4.0 (upgrade to 4.0.3.17); anyone on 3.9 or earlier needs to migrate. The SaaS version is already patched. In multi-tenant deployments the blast radius could span multiple business units or customers. Cisco found this internally and hasn't seen exploitation in the wild, but treat it as an active threat. ## OpenTelemetry graduates at CNCF OpenTelemetry officially reached CNCF graduation today, the highest maturity level the foundation awards. The project now has over 12,000 contributors from 2,800+ companies and ranks second only to Kubernetes in CNCF project velocity. The JavaScript API package grew from 75 million to over 200 million monthly npm downloads between April 2025 and April 2026. Graduation required a third-party security audit and governance review. The project is increasingly used to observe AI workloads, which is well-timed given how badly agent-driven deployments are about to stress existing observability stacks. --- ## Also notable - **NGINX RCE ("NGINX Rift"):** A heap buffer overflow in NGINX's rewrite scripting engine has existed for over 18 years; full RCE requires disabled ASLR but DoS is viable with memory protections enabled. Update to NGINX 1.27.4 / 1.26.3 or later. The bug was found by an AI-powered scanner in 6 hours. - **Modal Series C:** Modal raised $355M at a $4.65B valuation, reporting fivefold growth since its Series B and over $300M in annualized revenue, with over 1 billion sandboxes launched to date. - **GitLab 19.0:** Adds SBOM-based dependency scanning (GA for Maven, Gradle, Python), Claude Opus 4.7 and Gemini model support, Valkey replacing Redis, and a usage-based billing model via GitLab Credits. Envoy Gateway replaces NGINX Ingress in the Helm chart. - **Fediverse LD-Signatures vulnerability:** A flaw in Mastodon, Misskey, Iceshrimp.NET, and other fediverse software lets attackers manipulate objects signed by a victim's signature using obscure JSON-LD features like @included and @graph. Discovered by Anthropic via Doyensec. - **Grab's Hugo platform on Flink:** Replacing Kafka Connect and Spark with Apache Flink as a unified ingestion engine cut MySQL CDC onboarding from days to under 3 minutes; new pipelines onboarded in the past year exceed the total from the previous five years. - **Amazon CloudWatch Logs Insights:** 13 new commands and functions added, including logfmt parsing, Base64 decode, haversine distance, and nested JSON array expansion via `expand`. Available now in all commercial AWS regions. - **SageMaker OpenAI-compatible APIs:** SageMaker Inference now accepts the OpenAI SDK, LangChain, and Strands Agents directly by changing the endpoint URL — no custom integration code needed. Available across 14 AWS regions. - **OpenTofu 1.12:** Ships dynamic `prevent_destroy` driven by a variable, a decade-old pain point for teams reusing modules across environments. Also adds `destroy = false` to remove resources from state without destroying them. - **Node.js 24.16.0 LTS:** Adds `randomUUIDv7()`, test order randomization, mock-timers support for `AbortSignal.timeout`, and updates OpenSSL to 3.5.6 and SQLite to 3.53.0. - **Appwrite parallel uploads:** SDK update delivers up to 7x faster file uploads using parallel chunking with no API changes required; a 1.28 GB file drops from ~4 minutes 44 seconds to under 40 seconds. - **Google API key 23-minute window (detail):** Newer Gemini API keys with the AQ. prefix revoke in about 1 minute — significantly better than standard API keys but still not instant. - **InfluxDB cardinality ceiling:** A real-world case study (ALPLA, 181 facilities, 900 sensor types) shows dashboard queries dropping from 3-5 minutes to milliseconds after migrating to CrateDB, which avoids the TSM series model entirely. - **NetEase Games LLM cold starts:** Reduced from 42 minutes to under 30 seconds on Kubernetes using Fluid, a CNCF incubating project that adds Kubernetes-native dataset abstractions and cross-namespace model sharing for inference workloads. - **TeamCity 2025.11.5:** Likely final update for the 2025.11 series; includes four security fixes, making it a recommended upgrade for all on-premises users. --- Tags: [#security](https://daily.dev/tags/security), [#gcp](https://daily.dev/tags/gcp), [#npm](https://daily.dev/tags/npm), [#opentelemetry](https://daily.dev/tags/opentelemetry) [View this post on daily.dev](https://daily.dev/posts/npm-supply-chain-attack-hits-502-packages-google-api-keys-linger-23-minutes-after-deletion-bntdx4fqi)