Back to article
Microsoft Security Blog

Typosquatted npm packages used to steal cloud and CI/CD secrets (opens in new tab)

Covered by 10 sources See all sources covering this story including DEV Community, This Week In 4n6

Covered in 10 articles

DEV Community·

Two supply-chain attacks in one week — here's what to actually fix in your CI

Discussed on DEV
Feeds
This Week In 4n6·

Week 22

Feeds
The Register·

Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

Discussed on Hacker News
Feeds
programming.dev·

Typosquatted npm packages used to steal cloud and CI/CD secrets

Feeds
The Hacker News·

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Feeds
Techzine Global·

Microsoft discovers new npm attack in 14 packages

Feeds
CTO at NCSC·

CTO at NCSC Summary: week ending June 7th

Discussed on Substack
Feeds
risky.biz·

Risky Bulletin: Russia greatly expands SORM surveillance requirements

Discussed on Hacker News
Feeds
BadCyber·

IT Security Weekend Catch Up – June 7, 2026

Feeds
news.risky.biz·

Risky Bulletin: Russia greatly expands SORM surveillance requirements

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help