Software packages widely used by developers, including those related to SAP, Intercom and Lightning, were repeatedly exposed to hacking attacks, The Register reported. The attacks involved malicious hackers embedding malware in official packages downloaded by developers. When installed, the malware automatically ran to steal GitHub account passwords, cloud access keys for AWS and Google Cloud, and database credentials, then encrypt and send the data to external servers.

A widely used software package, Axios, was hacked after attackers took over a maintainer account, added a new dependency and shipped an update. The added package installed a tailored remote-access trojan and erased traces, while many security tools failed to flag it. Andreessen Horowitz partners said the case shows software supply-chain risk rising as AI coding spreads. They cited research finding AI agents more often pick vulnerable versions and enable new attacks such as slopsquatting, while detection remains slow in the industry.