Compromise Software Dependencies and Development Tools

{
  "id": "ATTACK:enterprise:T1195.001",
  "title": "Compromise Software Dependencies and Development Tools",
  "type": "Subtechnique",
  "source_url": "https://attack.mitre.org/techniques/T1195/001",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--191cc6af-1bb2-4344-ab5f-28e496638720",
  "external_id": "T1195.001",
  "domain": "enterprise",
  "created": "2020-03-11T14:13:42.916Z",
  "modified": "2026-10-06T16:05:56.514Z",
  "version": "2.0",
  "aliases": [

  ],
  "tactics": [
    "initial-access"
  ],
  "source_references": [
    {
      "source_name": "TrendMicro - OpenClaw Skills Distribute ATMOS",
      "url": "https://www.trendmicro.com/en/research/26/b/openclaw-skills-used-to-distribute-atomic-macos-stealer.html"
    },
    {
      "source_name": "Palo Alto Networks GitHub Actions Worm 2023",
      "url": "https://www.paloaltonetworks.com/blog/cloud-security/github-actions-worm-dependencies/"
    },
    {
      "source_name": "Google Agent Files May 2026",
      "url": "https://cloud.google.com/blog/products/identity-security/beyond-source-code-the-files-ai-coding-agents-trust-and-attackers-exploit"
    },
    {
      "source_name": "CrowdStrike Threat Hunting Report 2026",
      "url": "https://go.crowdstrike.com/2026-threat-hunting-report.html"
    },
    {
      "source_name": "Meyer PyPI Supply Chain Attack Uncovered",
      "url": "https://checkmarx.com/zero-post/python-pypi-supply-chain-attack-colorama/"
    },
    {
      "source_name": "Ahmed Backdoors in Python and NPM Packages",
      "url": "https://hackread.com/backdoors-python-npm-packages-windows-linux/"
    },
    {
      "source_name": "ESET Agent Skills March 2026",
      "url": "https://www.eset.com/blog/en/business-topics/threat-landscape/security-in-ai-agent-platforms/"
    },
    {
      "source_name": "MANDVI Malicious npm and PyPI Packages Disguised",
      "url": "https://cyberpress.org/malicious-npm-and-pypi-packages-disguised-as-dev-tools"
    },
    {
      "source_name": "Zenity Skill Supply Chain August 2026",
      "url": "https://labs.zenity.io/post/attackers-target-agents-via-the-skill-supply-chain"
    },
    {
      "source_name": "Microsoft Contagious Interview March 2026",
      "url": "https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/"
    },
    {
      "source_name": "Unit 42 Palo Alto GitHub Actions Supply Chain Attack 2025",
      "url": "https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack"
    },
    {
      "source_name": "OWASP CICD-SEC-4",
      "url": "https://owasp.org/www-project-top-10-ci-cd-security-risks/CICD-SEC-04-Poisoned-Pipeline-Execution"
    },
    {
      "source_name": "The Hacker News PyPi Revival Hijack 2024",
      "url": "https://thehackernews.com/2024/09/hackers-hijack-22000-removed-pypi.html"
    },
    {
      "source_name": "Microsoft - Agent Skills Docs",
      "url": "https://learn.microsoft.com/en-us/agent-framework/agents/skills"
    },
    {
      "source_name": "Bitdefender NPM Repositories Compromised 2021",
      "url": "https://www.bitdefender.com/en-gb/blog/hotforsecurity/popular-npm-repositories-compromised-in-man-in-the-middle-attack"
    },
    {
      "source_name": "Trendmicro NPM Compromise",
      "url": "https://www.trendmicro.com/vinfo/dk/security/news/cybercrime-and-digital-threats/hacker-infects-node-js-package-to-steal-from-bitcoin-wallets"
    },
    {
      "source_name": "Checkmarx-oss-seo",
      "url": "https://checkmarx.com/blog/new-technique-to-trick-developers-detected-in-an-open-source-supply-chain-attack/"
    }
  ]
}