Supply Chain Attack Analysis & PoC: @noha/openai-react-query-codegen npm

Vulnerability Overview Vulnerability Type: npm Supply Chain Attack Affected Package: Incident Time: On August 28, 2026, the attacker published 10 malicious versions to npm (20.0.0 and 20.2.1 UTC) Impact Scope: The package accumulated approximately 150,000 downloads during the affected time window Attack Path: The attacker triggered the release workflow via the event of the GitHub repository, leveraging permission to execute within the trusted publishing token context, thereby publishing arbitrary versions to npm Payload Targets: - Cloud and CI credentials: AWS Instance Metadata Service, container credential endpoints, Azure credential endpoints, Google Cloud Platform scopes, Kubernetes service account token paths - Registry credentials: npm, PyPI, RubyGems, JFrog Artifactory npm token listings, authentication, and OIDC token exchange paths - AI coding agent configurations: Overwrite , , , , , , , , and similar paths Scope of Impact The first 4 versions have no install scripts; npm runs the native build, but the and files are missing The two subsequent pre-release versions include a malicious script but package the project's actual field, redirecting the install script to a separate script Detection requires matching for the presence of or , or any install hooks Remediation The attacker account has removed PR #215 and #216, and force-pushed two branches to eliminate the malicious commits The original commits remain accessible via and All 10 releases carry valid SLSA provenance attestations, published through the project's genuine release workflow The repository was not tampered with; the default branch, all tags, and GitHub Releases remain in their pre-incident state; only the published npm artifacts are affected POC / Exploit Code Figure 1: New entry in Figure 2: Model Context Protocol Parameter Vector Complete Attack Chain

Goal Reached Thanks to every supporter — we hit 100%!

Supply Chain Attack Analysis & PoC: @noha/openai-react-query-codegen npm