npm trusted publishing could be hijacked by re-registering a freed GitHub repo name; 1,500+ packages were exposed · Jadid

Skip to content

JadidJust-in AI Developments, Incidents & Deadlines

Wednesday, October 14, 2026 · 3 of 5

npm trusted publishing could be hijacked by re-registering a freed GitHub repo name; 1,500+ packages were exposed
Oct 13Security

Read the full briefing · 23 stories