@7nohe/openapi-react-query-codegen Compromised in Supply Chain Attack (Campaign)
ID: e3246273-f2d9-585f-bca1-545b1ca46cf2
STIX ID: report--e3246273-f2d9-585f-bca1-545b1ca46cf2
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2026-08-28
Date Updated: 2026-09-10
Author: [email protected] (Wiz Threat Research)
...
...
On August 28 an attacker published eight malicious versions of the npm package @7nohe/openapi-react-query-codegen (available for ~3 hours). The trojanized package contained an updated miasma infostealer that collects and encrypts credentials, exfiltrates them to GitHub repositories (named with Touhou-themed keywords), and attempts automated propagation via multiple channels.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.