Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware

## Executive summary The report describes a series of supply-chain attacks (S1ngularity, Shai-Hulud, ChainDrop) in which attackers stole npm publishing tokens via GitHub Actions/CI flaws to publish malicious packages that executed post-install scripts to locate and exfiltrate credentials. These campaigns uniquely abused locally installed AI coding assistants to automate discovery of high-value secrets and included worm-like self-propagation by using compromised tokens to poison additional packages, resulting in large-scale credential exposure and data theft.