Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised

On June 24, 2026, an attacker published malicious versions of 20 npm packages belonging to the Leo Platform ecosystem in a coordinated burst spanning less than three seconds. All 20 packages carry an identical CI/CD attack toolkit that steals secrets from GitHub Actions runners, cloud credential sto…

View Post on Scour ↗

More from stepsecurity.io on Scour.

Covered by 3 sources including Malware Analysis, News and Indicators, The Hacker News