# Subcloak Headlines

> In-depth write-ups of the biggest software supply-chain and developer-security incidents: what happened, who is affected, indicators of compromise, and what to do. From Subcloak.

Subcloak is a security testing company. Headlines are its write-ups of the few supply-chain and developer-security incidents each week that matter most to people who build software: a hijacked package, a malicious editor extension, a compromised certificate authority, a project's infrastructure breached. Each report covers what happened, a timeline, who is affected, affected package versions, indicators of compromise, how to check, what to do, and its sources.

How they are written: from public sources, in Subcloak's own words, with links to every source. Indicators of compromise are listed only when they appear verbatim in a cited source; on the web pages they are shown defanged. Reports are reviewed by Subcloak, or say "Published automatically after checks". Withdrawn reports stay online with the reason. All times are UTC.

The same headlines appear in the Feed tab of Cloak Watch (https://subcloak.com/apps/cloak-watch), Subcloak's free Mac app that checks packages, editor extensions and MCP servers on a Mac against incidents like these.

## Machine-readable
- [All headlines as JSON](https://headlines.subcloak.com/headlines.json): every field of every report, with live (not defanged) indicators.
- [Atom feed](https://headlines.subcloak.com/feed.xml)
- [Sitemap](https://headlines.subcloak.com/sitemap.xml)

## Headlines
- [Docker Hub flaw let converted accounts hand personal access tokens to another user](https://headlines.subcloak.com/h/h-2026-0008/docker-hub-flaw-let-converted-accounts-hand-personal-access-tokens-to-another-user/): 23 Oct 2026. Medium, confirmed, Docker. A now-fixed Docker Hub flaw let a token act as someone else at the registry. Docker found no exploitation. Only users Docker emailed were exposed; check your tokens and revoke any you don't recognize.
- [OpenCode says its hosted Console was breached, exposing some users' AI provider keys](https://headlines.subcloak.com/h/h-2026-0007/opencode-says-its-hosted-console-was-breached/): 23 Oct 2026. High, developing, macOS. OpenCode says 1.4% of Console users with linked Anthropic, OpenAI or Google accounts were hit. If you got its email, replace those keys, update your apps and check usage and billing. No email means not affected, it says.
- [Fake Solidity and Hardhat extensions on Open VSX install backdoor on Macs, Pluto says](https://headlines.subcloak.com/h/h-2026-0006/fake-solidity-and-hardhat-extensions-on-open-vsx-install-backdoor-on-macs/): 23 Oct 2026. High, developing, Open VSX, macOS, VS Code. Pluto Security says fake Solidity tools on Open VSX drop a backdoor on Macs. If you installed any of four listed extensions, treat the machine as compromised, disconnect it and rotate credentials, wallet keys first.
- [GhostAction wave plants secret-stealing fake security workflows in GitHub repositories](https://headlines.subcloak.com/h/h-2026-0005/ghostaction-wave-plants-secret-stealing-fake-security-workflows-in-github/): 23 Oct 2026. High, confirmed, GitHub Actions. Attackers with hijacked GitHub accounts pushed a fake security-audit workflow that sends secrets, including from git history, to a bare IP. Check your repos and account activity, then revoke the pushing credential and rotate secrets.
- [Tensorlake npm package version 0.5.144 hijacked to ship credential-stealing worm](https://headlines.subcloak.com/h/h-2026-0004/tensorlake-npm-package-version-0-5-144-hijacked-to-ship-credential-stealing-worm/): 23 Oct 2026. Critical, confirmed, npm, macOS. A poisoned tensorlake 0.5.144 ran malware at npm install. If you installed it, remove the token monitor first, then rotate npm, GitHub, SSH and cloud credentials. Version 0.5.143 is clean.
- [PHP2Shell: two critical PHP engine flaws patched after disclosure leaked early](https://headlines.subcloak.com/h/h-2026-0003/php2shell-two-critical-php-engine-flaws-patched-after-disclosure-leaked-early/): 23 Oct 2026. High, confirmed, PHP, Docker, macOS. Two unauthenticated remote code execution flaws in PHP are fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Update every PHP install and image, restart workers. Servers are at highest risk; most developer Macs less so.
- [Eight eMudhra intermediate CA keys exposed; browsers block them, other tools may not](https://headlines.subcloak.com/h/h-2026-0002/eight-emudhra-intermediate-ca-keys-exposed/): 23 Oct 2026. High, confirmed, macOS, Go, npm, PyPI. Weakly generated keys let anyone forge certificates. Browsers block the intermediates, but Mac command-line tools and runtimes may still trust them. Update them and rebuild Go programs.
- [LiteLLM 1.107.0 hijacked on PyPI and Docker, shipping a credential stealer](https://headlines.subcloak.com/h/h-2026-0001/litellm-1-107-0-hijacked-on-pypi-and-docker/): 23 Oct 2026. Critical, confirmed, PyPI, Docker, GitHub Actions. A poisoned LiteLLM 1.107.0 reached PyPI and Docker on 21 October. If it was installed where Python ran, treat that environment as compromised, remove the payload files, pin 1.106.2 and rotate secrets.

## Subcloak
- [Subcloak](https://subcloak.com): security testing for web apps, APIs, mobile, cloud and AI agents.
- [Cloak Watch](https://subcloak.com/apps/cloak-watch): free Mac app for supply-chain attack checks.
- [Cloak Proxy](https://subcloak.com/apps/cloak-proxy): free Mac HTTPS debugging proxy.
- Corrections and contact: hello@subcloak.com