Public research from the Depi team: named attack classes, novel exploit patterns, and threat-intel posts on what moves in upstream security.https://depi.securityen-ushttps://depi.security/blog/20260701-find-comment-get-shellhttps://depi.security/blog/20260701-find-comment-get-shellAn attacker-posted issue comment raced dbt automation and landed in a Bash conditional, leaking FISHTOWN_BOT_PAT. Exploit chain built by an AI agent.Wed, 01 Jul 2026 00:00:00 GMTV.M.Security ResearchGitHub ActionsGitHub ActionsCommand InjectionSupply Chain AttackdbtDepihttps://depi.security/blog/20260521-npx-used-confusion-and-its-super-effectivehttps://depi.security/blog/20260521-npx-used-confusion-and-its-super-effectivenpx installs an unclaimed package when a bin name does not resolve locally. Claiming those names on the public registry earned five-figure RCE bounties.Thu, 21 May 2026 00:00:00 GMTV.M.Security Researchnpmnpx ConfusionDependency ConfusionSupply Chain AttacknpmBug Bountyhttps://depi.security/blog/20260514-node-ipc-compromisedhttps://depi.security/blog/20260514-node-ipc-compromisednode-ipc 12.0.1 shipped a DNS-exfiltrating infostealer, published by a maintainer dormant 1,476 days whose contact domain had lapsed and been re-registered.Thu, 14 May 2026 00:00:00 GMTRONI CARTA | LUPINThreat Intelligencenpmnode-ipcEmail TakeoverSupply Chain AttacknpmDNS TunnelingDepihttps://depi.security/blog/20260511-tanstack-supply-chain-compromisehttps://depi.security/blog/20260511-tanstack-supply-chain-compromiseGitHub Actions cache poisoning in TanStack/router seeded a worm across 47+ npm packages. Malicious releases carried valid SLSA provenance.Mon, 11 May 2026 00:00:00 GMTRONI CARTA | LUPINThreat IntelligencenpmTanStackGitHub ActionsCache PoisoningSupply Chain AttacknpmDepihttps://depi.security/blog/20260402-img-colour-supply-chain-hackhttps://depi.security/blog/20260402-img-colour-supply-chain-hackDependabot impersonation bypassed the actor check in the @img/colour pull_request_target workflow, leaking the GITHUB_TOKEN on 40M weekly downloads.Thu, 02 Apr 2026 00:00:00 GMTGARANCE DE LA BROSSESecurity ResearchGitHub ActionsGitHub ActionsDependabotSupply Chain AttacknpmDepihttps://depi.security/blog/20260317-one-label-away-from-80m-install-per-weekhttps://depi.security/blog/20260317-one-label-away-from-80m-install-per-weekTOCTOU race in Rollup pull_request_target workflows. A mutable merge ref plus a shared cache chained into release tampering on 78M weekly installs.Tue, 17 Mar 2026 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchGitHub ActionsRollupGitHub ActionsCache PoisoningSupply Chain AttackDepihttps://depi.security/blog/20260317-ledger-donjon-depi-supply-chainhttps://depi.security/blog/20260317-ledger-donjon-depi-supply-chainDepi flagged a Rollup CI/CD risk seven days before the maintainer patched it. Ledger mapped every impacted project and pinned before disclosure.Tue, 17 Mar 2026 00:00:00 GMTRONI CARTA | LUPINProductCross-ecosystemDepiLedgerRollupSupply Chain AttackCase Studyhttps://depi.security/blog/20251003-36m-installshttps://depi.security/blog/20251003-36m-installsPwn Request chained with GitHub Actions cache poisoning stole npm publish tokens for cross-fetch and graphql-js, 36 M weekly installs combined.Fri, 03 Oct 2025 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchGitHub ActionsGitHub ActionsCache PoisoningSupply Chain AttacknpmDepiGato-Xhttps://depi.security/blog/20250731-depi-aws-marketplacehttps://depi.security/blog/20250731-depi-aws-marketplaceDepi is now transactable on AWS Marketplace. Procurement through an existing AWS agreement, consolidated billing, and same-day repository scanning.Thu, 31 Jul 2025 00:00:00 GMTRONI CARTA | LUPINProductCross-ecosystemDepiAWSMarketplacehttps://depi.security/blog/20250610-netflix-vulnerability-dependency-confusionhttps://depi.security/blog/20250610-netflix-vulnerability-dependency-confusionUnclaimed npm package nf-cl-logger, mined from 1 TB of Netflix JavaScript, executed on a Netflix developer machine 31 hours after publish.Tue, 10 Jun 2025 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchnpmNetflixnpmDependency ConfusionSupply Chain AttackBug Bountyhttps://depi.security/blog/20250327-we-hacked-gemini-source-codehttps://depi.security/blog/20250327-we-hacked-gemini-source-codeLeaked Google's internal google3 source and confidential security protos out of Gemini's Python sandbox by exfiltrating a 579 MB binary in 10 MB chunks.Thu, 27 Mar 2025 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchAIGoogleGeminiLLMAIBug Bountyhttps://depi.security/blog/20250304-depi-launchhttps://depi.security/blog/20250304-depi-launchDepi ships as an offensive supply chain scanner, resolving full dependency trees plus maintainer and CI/CD posture. Funded by $500K of bug bounty research.Tue, 04 Mar 2025 00:00:00 GMTRONI CARTA | LUPINProductCross-ecosystemDepiSoftware Supply ChainProduct Launchhttps://depi.security/blog/20250211-hack-supply-chain-for-50khttps://depi.security/blog/20250211-hack-supply-chain-for-50kA public Docker image from an acquired subsidiary leaked backend source, a live GitHub Actions token and an npm publish token. $50,500 bounty.Tue, 11 Feb 2025 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchDockerDockerSupply Chain AttackRed TeamBug Bountyhttps://depi.security/blog/20241107-10-to-hack-millions-of-companieshttps://depi.security/blog/20241107-10-to-hack-millions-of-companiesA $10 expired email domain reset a GitHub account still active in a $25B company. Same flaw exposed npm packages with 54.8M monthly downloads.Thu, 07 Nov 2024 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchnpmExpired DomainEmail TakeoverSupply Chain AttackBug Bountyhttps://depi.security/blog/20241028-hidden-supply-chain-linkshttps://depi.security/blog/20241028-hidden-supply-chain-linksUnpublished npm packages stay claimable. Wildcard workspace deps in HashiCorp Consul gave code execution inside a Fortune 500 network, $17,000 bounty.Mon, 28 Oct 2024 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchnpmnpmDependency ConfusionSupply Chain AttackHashiCorpBug Bountyhttps://depi.security/blog/20240603-npm-cache-poisoninghttps://depi.security/blog/20240603-npm-cache-poisoningCache poisoning on registry.npmjs.org served a cached 404 for any package. One machine poisoned a quarter of requests; GitHub paid $500 and closed it.Mon, 03 Jun 2024 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchnpmnpmCache PoisoningSupply Chain AttackDoSBug Bountyhttps://depi.security/blog/20240304-google-hack-50000https://depi.security/blog/20240304-google-hack-50000Bard IDOR, a GraphQL directive-overloading DoS that hung Google's backend for 109 seconds, and Workspace data exfiltration via markdown images.Mon, 04 Mar 2024 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchAIGoogleAILLMGraphQLDoSBug Bountyhttps://depi.security/blog/20230811-sandwich-attackhttps://depi.security/blog/20230811-sandwich-attackUUIDv1 password reset tokens brute-forced with the Sandwich Attack. Zero-click account takeover across 100,000 candidate tokens, $5,000 bounty.Fri, 11 Aug 2023 00:00:00 GMTRONI CARTA | LUPINSecurity ResearchWebSandwich AttackAccount TakeoverUUIDBug Bountyhttps://depi.security/blog/20230404-introhttps://depi.security/blog/20230404-introLupin & Holmes launches as an offensive security venture built by two brothers, focused on R&D services, bug bounty hunting, and security tooling.Tue, 04 Apr 2023 00:00:00 GMTLUPIN & HOLMESProductCross-ecosystemLupin & HolmesCompany