Supply Chain Attack Campaign
CanisterWorm is a worm-enabled npm supply chain campaign that compromises legitimate publisher space, replaces package contents with install-time malware, establishes Linux persistence through systemd --user, and uses an ICP canister dead drop to deliver follow-on binaries. The campaign also includes a republishing component that uses compromised npm publishing access to spread the malicious payload across additional packages while preserving legitimate READMEs as camouflage.
Ecosystems: npm
TeamPCP is targeting security tools across the OSS ecosystem, turning scanners and CI pipelines into infostealers to access enterprise secrets.
Newly published Trivy Docker images (0.69.4, 0.69.5, and 0.69.6) were found to contain infostealer IOCs and were pushed to Docker Hub without corresponding GitHub releases.
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.