Evidence · DiggingBeagle record
StepSecurity: SubQuery 5.8.3 package investigation
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsAI package triage led to a confirmed malicious SubQuery release investigation: The malicious code ran on installation and import; StepSecurity traced external artifact substitution into legitimate publishing and found no recovered payload in the two adjacent releases it compared.
Opening findings; version comparison; Publication Timeline; workflow analysis