A significant cybersecurity breach has affected numerous widely-used open source projects, posing risks to software developers globally. Cybersecurity firms StepSecurity and SafeDep issued warnings on Tuesday regarding a series of supply-chain attacks aimed at developers, enabling hackers to distribute harmful updates to users.
Within approximately 20 minutes, hackers managed to take control of a developer's account, releasing more than 630 malicious versions across 317 packages. The primary intention is to capture credentials for various services, including password managers, allowing for data theft and further malware dissemination. One of the targeted packages is Antv, a library developed by Alibaba.
This current series of attacks, dubbed “Mini Shai-Hulud,” is part of a larger campaign against open source projects. Recently, two employees of OpenAI were compromised following the hacking of the open source library TanStack, marking them as one of several affected organizations.