# npm fixes publishing flaw that let reclaimed repository addresses bypass trust

_Published Tuesday, October 13, 2026 at 7:24 AM EDT · Security, AI · Latest · Tier 2 — Notable_

![npm fixes publishing flaw that let reclaimed repository addresses bypass trust — Primary](https://media.thenextweb.com/2026/10/ai-agent-robots-npm-packages-slugs-hummingbird-illustration.jpg)

npm has fixed a Trusted Publishing vulnerability that could let an attacker publish under a legitimate package name by reclaiming a GitHub repository address, Bloom Security reported. Its scan identified more than 1,500 vulnerable packages with over 10 million combined downloads.

The flaw arose when trust configurations referenced a repository's readable address without immediately recording its permanent identifier. Bloom demonstrated publication from a second, researcher-controlled repository after reclaiming the address. Automated package installations could then distribute malicious releases and execute installation scripts.

Bloom discovered the fix while repeating its attack test before publication; npm subsequently confirmed remediation. The scan covered packages configured for Trusted Publishing, a subset of npm's ecosystem.

## Sources

- [The Next Web](https://thenextweb.com/news/npm-trusted-publishing-flaw-ai-agents-slugfest)

---
Canonical: https://techandbusiness.org/newswire/jkK3IGlzxDY71J48u4UrcM
Published: 2026-10-13T11:24:33.990Z
Story chronology: 2026-10-13T10:00:34.000Z
Retrieved: 2026-10-13T13:20:45.689Z
Publisher: Tech & Business (techandbusiness.org)