// 토큰 유형
GCP Service Account 유출
GCP Service Account이(가) 노출된 인덱싱 사고. 공개 일자 기준 정렬.
2건 인덱싱됨
- ·CRITICAL9.4·confirmed
AntV npm Account Compromise: Mini Shai-Hulud Wave Hits 323 Packages (May 2026)
On 2026-05-19 the @antv npm publisher session was used to ship 639 malicious versions across 323 packages, the Mini Shai-Hulud campaign now totals 1,055 versions across 502 packages.
벡터 / npm supply chain플랫폼 / npm, GitHub, AWS, +2분량 / 22분 - ·CRITICAL9.0·confirmed
Bitwarden CLI Supply Chain Compromise (2026)
A malicious build of @bitwarden/cli was published to the public npm registry for roughly 90 minutes, exfiltrating cloud tokens, SSH keys, and AI tooling credentials from CI runners and developer machines.
벡터 / npm supply chain플랫폼 / npm, GitHub, Bitwarden, +3분량 / 6분