Technology ❯ Cybersecurity ❯ Supply Chain Attacks

Malware

Credential Theft NPM Packages Exploit Vulnerabilities Crypto Drainers Backdoors npm Packages Website Compromise Trojanized Software State-Sponsored Attacks OpenAI Remote Access Trojans Incident Response Trivy Security Protocols Bitwarden SAP NPM Packages VS Code Extensions TanStack Rust Crates

Brevo Breach Used Cloudflare Worker to Inject Malware on More Than 100,000 Sites

The intrusion shows how a stolen long‑lived API key and edge functions can turn a trusted vendor script into a wide malware distribution channel.

Typosquatted Rust Crate Delivered Build‑Time Backdoor

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging