Restrospective: How Malicious Updates Poison Your Environment

This retrospective analyzes a 2025–2026 wave of software supply‑chain attacks — notably S1ngularity, Shai‑Hulud (and variants) and the TeamPCP campaigns — that leveraged compromised CI/CD tokens, post‑install hooks and self‑propagating worms to steal credentials (GitHub, npm, cloud, SSH), republish malicious packages, and in one case co-opt victims' local AI agents to hunt for secrets; the attacks spread across dozens to hundreds of packages, led to extortion and collaboration with ransomware groups, and caused widespread financial and operational damage.