September 22, 2026
- GHAPPIER: CloudSEK disclosed a previously unreported loader operation after an attacker held a legitimate npm maintainer account for roughly 105 minutes on 9 September and published malware through the package's authorised CI pipeline — so the malicious release carried valid provenance via trusted publishing. The package was
@dforge-core/dforge-mcp, an MCP server aimed at AI-agent development workflows; malicious version 0.2.21 sat as the latest release for about 35 minutes. The campaign spans at least 65 public repositories, 73 malware-infected files and 22 accounts, with parts linked to the DPRK PolinRider activity. CloudSEK, full report (PDF) · Supply Chain & Developer Targeting
in Delivery Through the Trust Layer: GPO, a Signed Driver, and Valid npm Provenance