New AWS Console Supply Chain Attack Lets Attackers Hijack AWS GitHub Repositories

Cybersecuritynews •Guru Baran • January 16, 2026

A critical misconfiguration in AWS CodeBuild enabled unauthenticated attackers to seize control of key AWS-owned GitHub repositories, including the widely used AWS JavaScript SDK powering the AWS Console itself. This supply chain vulnerability threatened platform-wide compromise, potentially injecting malicious code into applications and the Console across countless AWS environments. AWS Console Supply Chain Attack Security […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AWS Console Supply Chain Breach Allows GitHub Repository Hijacking A critical misconfiguration in AWS CodeBuild allowed unauthenticated attackers to gain control of AWS-owned GitHub repositories, including the AWS JavaScript SDK. This supply chain vulnerability posed a risk of injecting malicious code into applications and the AWS Console across various environments. 2 sources 56

Extracted Entities

New AWS Console Supply Chain Attack Lets Attackers Hijack AWS GitHub Repositories

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

Platforms (3)