Technology ❯ Cybersecurity

Supply Chain Security

Malware Software Vulnerabilities Supply Chain Attacks Software Development Software Supply Chain Open Source Security Software Supply Chain Attacks Vulnerability Management Open Source Software Threat Detection

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

The case shows how a single maintainer breach can push malware to millions.

Meta Halts Work With Mercor After Breach Tied to LiteLLM Supply-Chain Attack

Stories older than 24h

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

Anthropic’s Claude Code Source Exposed in NPM Leak as Copies Proliferate on GitHub

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

TeamPCP Supply-Chain Attacks Hit First 48-Hour Lull as Focus Turns to Monetization

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

Notepad++ Releases v8.9.2 With 'Double‑Lock' Update Security After Supply‑Chain Hijack

Open VSX Publisher Account Hijacked to Push GlassWorm Through Four Popular Extensions

Apple Probes Cyberattack on Unnamed China Assembler Targeting Production Systems

Shai-Hulud 2.0 Exposes 400,000 Developer Secrets Across NPM and GitHub

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

SEC Drops SolarWinds Case Over Sunburst Disclosures

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages

Python Foundation Declines $1.5 Million NSF Grant Over Anti-DEI Terms

GitHub Details Staged Overhaul of npm Publishing Security

Ruby Central Assumes Temporary Administrative Control of RubyGems and Bundler

Obsidian Details ‘Less Is Safer’ Engineering to Curb Software Supply-Chain Risk

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage