{"data":{"id":"25de20fd-ff19-47ee-8abd-8ed4466f435f","title":"Over 1,500 npm packages exposed by Trusted Publishing validation flaw","summary":"Bloom Security researchers found a flaw in npm's Trusted Publishing, dubbed SlugFest, that let attackers publish under legitimate packages by reclaiming abandoned GitHub repository names. npm trusted the repository's owner/repository name rather than its immutable numeric ID, and the researchers identified more than 1,500 potentially vulnerable packages with over 10 million combined downloads. The attack did not require stealing the maintainer's credentials.","solution":"The npm team shipped a fix on October 2 introducing a 48-hour expiry for unvalidated Trusted Publishing configurations. npm also rejects trusted-publishing tokens issued through GitHub Actions' issue_comment events, alongside the existing restriction on pull_request_target events. Bloom recommends that maintainers audit their Trusted Publishing configurations.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4234229/over-1500-npm-packages-exposed-by-trusted-publishing-validation-flaw.html","publishedAt":"2026-10-13T10:02:12.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["npm","GitHub","GitHub Actions","AI coding agents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-13T10:02:12.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":["AML.T0010"]}}