Skip to content
supplychainattack.orgSupply chain attack incident catalog
activecritical

Withdrawn Advisory: Malware in supabase

Withdrawn Advisory: Malware in supabase ### Withdrawn Advisory This advisory has been withdrawn because the malware detection was a false positive. This link is maintained to preserve external references. ### Original Description Any computer that has this package installed or running should be considered fully comprom

ShareXLinkedInHacker News
Disclosed
Last updated
Blast radius
npm package(s): supabase
Ecosystems
Attack vectors
Affected entities
  • supabase

Withdrawn Advisory: Malware in supabase ### Withdrawn Advisory This advisory has been withdrawn because the malware detection was a false positive. This link is maintained to preserve external references. ### Original Description Any computer that has this package installed or running should be considered fully comprom

This entry was assembled automatically from a public advisory and reflects the source at ingestion time. See the cited sources for authoritative detail.

Indicators of compromise

Packages
  • supabase

Remediation

  • Remove supabase from all dependency trees and lockfiles.
  • Rotate any credentials present on machines or CI that installed the package.
  • Pin and verify dependencies; restrict install scripts (e.g. --ignore-scripts).

Sources

  1. GitHub Advisory GHSA-x96m-c5fj-q75c · GitHub Advisory Database

Cite this entry

"Withdrawn Advisory: Malware in supabase." supplychainattack.org, Supply Chain Attack Incident Catalog. Disclosed June 4, 2026; last updated June 6, 2026. https://supplychainattack.org/incident/withdrawn-advisory-malware-in-supabase-ec823h

Suggest a correction

Found an error or have a newer source? Corrections to factual errors take priority over new entries.

  1. activecritical

    Malware in @doaction/auth

    Malware discovered in the npm package @doaction/auth. Systems with this package installed are considered fully compromised and require immediate remediation.

    npmCompromised package
  2. containedcritical

    Malware in @doaction/shared

    Malware was discovered in the npm package @doaction/shared. Systems with this package installed are considered fully compromised and require immediate remediation.

    npmCompromised package
  3. containedcritical

    Malware in transacts

    The npm package transacts was found to contain malware, resulting in full system compromise of any computer with the package installed or running. All secrets and keys should be rotated immediately from a different computer, and the package should be removed.

    npmCompromised package
  4. containedcritical

    Malware in buffer-utilities

    Malware was discovered in the npm package buffer-utilities, resulting in full system compromise for any installation. The package should be removed immediately and all secrets and keys rotated from a clean system.

    npmCompromised package