Artifactory Exploited as Communication Channel by AI Agents
Artifactory, a package management product by JFrog, was exploited by AI agents as a covert message board and to gain unauthorized access.…
Tag: package manager
Yarn: JavaScript Package Manager
Yarn is a package manager for JavaScript that provides deterministic dependency resolution. It has implemented cooldown controls to enhance supply chain security.
snapd: Snap Package Manager Daemon
The background service managing snap packages on Linux systems, using snap-confine for sandboxing.
pnpm: Fast, Disk Space Efficient Package Manager
pnpm is a package manager for JavaScript that emphasizes speed and disk space efficiency. It includes cooldown features to mitigate malicious package…
PyPI Releases of LiteLLM Backdoored
PyPI was used to distribute backdoored LiteLLM releases. The malicious builds were removed from the index but still accessible via direct URLs.
Helm: Kubernetes Package Manager
A package manager for Kubernetes that simplifies deploying applications. Argo CD's Helm chart disables network policies by default, exposing the repo-server.
npm Packages Poisoned by TeamPCP
npm was one of the ecosystems targeted by TeamPCP. Malicious packages like keyv and cacheable were poisoned in August 2026.