Threat
npm Supply-Chain Attack Abuses Trusted Publishing to Ship GHAPPIER Loader GHAPPIER Loader: npm Supply-Chain Attack via Trusted Publishing | Orca Security
First reported · Discovered orca.security
Page published
Earliest dated coverage: 22 Sep 2026 · First observed: 17 Oct 2026 · Latest dated coverage: 22 Sep 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
GHAPPIER demonstrates that valid npm provenance cannot establish package safety, while a compromised MCP server can expose host credentials and provide access to connected infrastructure.
The GHAPPIER supply-chain attack distributed a remote-shell implant through @dforge-core/dforge-mcp version 0.2.21 after attackers compromised a maintainer account and modified its GitHub Actions release workflow. The malicious release carried valid npm provenance and activated when the MCP server launched, ultimately executing a self-deleting implant. A clean version, 0.2.22, was subsequently published.