Topic starter
02/08/2026 12:25 pm
TL;DR: Malicious packages are exploiting typosquatting, dependency confusion, package hijacking and maintainer phishing to infiltrate npm and PyPI supply chains, and Veracode cites the 2025 Verizon DBIR figure that 30% of breaches now involve a third party. The control gap is governance over provenance, maintainer trust and developer access before code reaches the build pipeline.
Editorial analysis by NHI Mgmt Group, based on content published by Veracode: “Malicious Packages: The Silent Threat to Your Codebase”.
Key questions
Q: What breaks when malicious packages reach build pipelines unchecked?
A: Unchecked packages can execute before conventional controls inspect them, which means secrets, environment variables, and internal tokens can be exposed during install or runtime.
Q: Why do maintainer phishing and account takeover make supply chain attacks so effective?
A: Because registry systems usually trust whoever controls the publishing identity.
Q: How do security teams know if dependency controls are actually working?
A: Look for whether build systems prevent unauthorised version drift, whether package provenance is checked before install, and whether secret-handling code is isolated from broad application reach.
Practitioner guidance
- Enforce package provenance checks before install Block unvetted dependencies at the ingestion point and require provenance signals for public packages, internal mirrors and critical builds.
- Harden maintainer identity and publishing access Require strong authentication for package maintainers, review access to publishing rights and remove dormant or abandoned package owners.
- Monitor CI/CD for secret exfiltration behavior Add detections for unexpected outbound calls, secret access and repository visibility changes during package install and build stages.
Bottom line: Malicious packages exploit the trust assumptions baked into dependency intake, publishing rights and automated updates, which makes software supply chains vulnerable before code even reaches production.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 1:24 pm
Codebase trust is the real attack surface in modern supply chains: the decisive control gap is not whether a scanner can spot known malware, but whether the organisation can trust the package, the maintainer and the publishing path before install time. Typosquatting, dependency confusion and account takeover all exploit the same assumption that registry trust is good enough by default. Practitioners need to treat dependency intake as a governed trust decision, not a passive download event.
A few things that frame the scale:
- Breaches involving third parties rose to 48% of all breaches, a 60% increase on the previous year, according to Verizon's 2026 Data Breach Investigations Report.
A question worth separating out:
Q: What is the difference between package scanning and package provenance controls?
A: Scanning evaluates what is already present in a package, while provenance controls decide whether the package should be trusted and admitted in the first place. Scanning is useful for detection, but provenance controls reduce the chance that a malicious or hijacked package ever enters the build pipeline.
👉 Read our full editorial: Malicious packages expose the codebase trust gap in software supply chains