Active npm supply-chain compromise hits Immobiliare-published packages

Hacktron's alert names an active compromise of packages published by Immobiliare, telling anyone with those packages in their dependency tree to check it, remove affected packages, and rotate exposed secrets, without naming the specific packages in the tweet itself. Independent research identifies the affected packages as four Backstage plugins maintained by Immobiliare Labs covering GitLab and LDAP integration, with malicious versions published simultaneously across all four on June 26, 2026. The payload ran automatically at install time through a build hook, then harvested credentials including GitHub tokens and cloud provider keys, and specifically tried to persist inside configuration files for AI coding assistants including Claude Code, GitHub Copilot, and Cursor.

The same research describes self-propagation behavior consistent with a supply-chain worm, meaning compromised credentials could be used to publish further malicious packages rather than the compromise stopping at the four original ones. Because the payload targets credentials broadly rather than just npm-specific secrets, remediation means rotating any credential type the payload could reach, not only registry tokens, for any environment where the affected package versions were installed.