Leo Platform npm Supply Chain Attack (June 2026)
Last changed 2026-11-04 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 3 to 0. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·2yxVKS…DPG6Summary
On June 24, 2026, 20 npm packages belonging to the Leo Platform (LeoPlatform/LeoInsights) ecosystem were simultaneously compromised via a single hijacked maintainer account, delivering a credential-stealing worm structurally identical to the earlier Miasma campaign. The attack is attributed to tooling derived from the TeamPCP Shai-Hulud worm framework, which was open-sourced on May 12, 2026, enabling copycat or original-actor operations against new ecosystems. Approximately 13,600 weekly downloads were exposed to a payload capable of stealing CI/CD secrets, cloud credentials, cryptocurrency wallet files, and AI coding-tool configurations.
Connected Entities
4 entities · 47 linked investigations- Leo Platform npm Supply Chain Attack (June 2026)→mentioned with→Phantom Wallet(70%)
- Leo Platform npm Supply Chain Attack (June 2026)→mentioned with→Shai-Hulud / TeamPCP Supply Chain Attack(70%)
- Leo Platform npm Supply Chain Attack (June 2026)→mentioned with→UNUS SED LEO(70%)
Connected Through
3 shared actors · 47 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Phantom Walletorganization
- □Shai-Hulud / TeamPCP Supply Chain Attackorganization
- □UNUS SED LEOorganization
Timeline(9 events)
2025
TeamPCP begins active supply chain attack campaigns targeting npm and PyPI ecosystems using the Shai-Hulud worm framework (approximate start based on reporting).
Datadog Security Labs13 April 2026
Credentials belonging to a Red Hat employee appear in commercial infostealer logs — the earliest known precursor to the subsequent Miasma campaign.
Microsoft Security Blog12 May 2026
TeamPCP open-sources the Shai-Hulud worm framework on GitHub under MIT License with the message 'Shai-Hulud: Open Sourcing The Carnage,' enabling potential copycat operations.
Datadog Security LabsJune 2026
Miasma first wave: malicious commits pushed to three @redhat-cloud-services repositories at 10:53 UTC.
Wiz Blog3 June 2026
Miasma campaign publicly confirmed: 32 @redhat-cloud-services npm packages compromised across 57 packages and 286 malicious versions using the Phantom Gyp technique.
Miasma Supply Chain Attack - The Hacker News5 June 2026
IronWorm campaign disclosed: 50+ npm packages trojanized via compromised 'asteroiddao' npm account, including Exodus cryptocurrency wallet file theft.
The Hacker News24 June 2026
Orphan branches created on Leo Platform GitHub repositories at approximately 22:50 UTC, containing weaponized Dependabot workflow files requesting OIDC publishing permissions.
SafeDep24 June 2026
At 23:04:55 UTC, 20 malicious npm package versions published across the Leo Platform ecosystem in a 3-second burst using the compromised czirker maintainer account.
StepSecurity25 June 2026
Public disclosure by StepSecurity and SafeDep; GBHackers reports attack as Shai-Hulud Hades Payload targeting Leo/RStreams packages.
GBHackersDecision Log
- slot 465095210 · hash ES1Z4wWNtuNFfqDQfu8SqTqteYAvihY7m2shYdgaj4L8
- slot 465095204 · hash 7hKiytAuCKdjhokbJhwFahfbhtiGge3JbaEKpofXHkZL
- slot 428847360 · hash GM3BvCBEaBtWT2BEnYjibxKJMBiC1D4gPWrRCWq9nZgQ
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 15 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/25/2026, 5:03:56 PM
last updated: 11/4/2026, 12:09:51 AM
3 viewsavoid.net — verified advice for a post-truth world