Date Observed: October 21, 2026Ecosystem: PyPI (Python) and Docker (GHCR, Docker Hub)Targets: Hosts, CI runners, and LiteLLM proxy containers that
Date Observed: October 8-16, 2026 (latest two waves; campaign remains active)Ecosystem: GitHub, GitHub Actions, and developer workstationsTargets: Open-source maintainers; CI/CD
Date Observed: August 28, 2026Ecosystem: npm, with propagation capabilities targeting PyPI and RubyGemsTargets: Developers and CI runners installing @7nohe/openapi-react-query-codegen; maintainer,
Date Observed: Disclosed July 30, 2026. Anthropic has not published the date the package went live.Ecosystem: PyPI (Python)Targets: Developer workstations,
Date Observed: August 4, 2026Ecosystem: npmTargets: CI/CD runners and developer workstations consuming keyv, cacheable, flat-cache, file-entry-cache, cache-manager, plus 400+ downstream
Date Observed: July 14, 2026Ecosystem: npm (@asyncapi organization)Targets: Developers, CI/CD runners, and build systems consuming AsyncAPI packagesAttack Type: CI/CD compromise
Date Observed: June 24, 2026 (LeoPlatform wave); follow-on @immobiliarelabs wave June 26, 2026Ecosystem: npm (primary); propagation logic also targets PyPI,
Date Observed: June 17, 2026Ecosystem: npm (@mastra scope)Targets: Developer workstations and CI/CD runners installing @mastra/* packagesAttack Type: Account takeover +
Date Observed: June 1, 2026Ecosystem: npm @redhat-cloud-services Targets: CI/CD pipelines and developer workstations consuming @redhat-cloud-services packages Attack Type: CI/CD pipeline compromise; preinstall
Date Observed: May 19, 2026Ecosystem: PyPI (Python)Targets: CI/CD runners, cloud workloads, Kubernetes clusters, developer environments consuming durabletaskAttack Type: Supply chain
