Since early 2025, software package maintainers have faced a sustained wave of attacks. Adversaries have used credential theft, exploitation of vulnerable CI/CD workflows, targeted social engineering, and adversary-in-the-middle (AiTM) phishing to compromise upstream packages. The damage is real: the Shai-Hulud worms, TeamPCP's compromise of Trivy and the LiteLLM PyPI package, and North Korea's takeover of the widely used Axios package. These attacks infected thousands of developers and pipelines.

This talk covers how we hunt for malicious and compromised packages at scale, give the community the right tools to do the same, and secure an internal engineering organization of over 3,000 engineers who install third-party packages every day.