A security research firm reported that attackers compromised 42 third-party GitHub repositories by deploying large payload blobs that evaded standard search and API paths. The victims included repositories for AI coding assistants and IDEs.
The vulnerability or weakness
The attackers used large payload blobs, some as large as 13.7MB, that decoded to the same hidden CI-publisher payload. The technique leveraged a compiled native addon that decrypts a file named .napicache at runtime.
Earlier attacks and coverage
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline (2026-10-24)
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories (2026-10-19)
Business impact
Organizations could face operational disruptions and data breaches, leading to potential financial losses and reputational damage. Exposed npm credentials could lead to further attacks.
Industries affected
Tech companies and those relying on AI coding assistants and IDEs are particularly affected.
Users affected
Users of affected repositories and services could have their credentials and data compromised, leading to potential misuse of their accounts.
