Technology ❯ Cybersecurity ❯ Supply Chain Security

Malware

Credential Theft npm Packages Remote Access Trojans npm Ecosystem JavaScript Attacks Browser Extensions Ransomware LiteLLM Attack Docker Images Plugin Vulnerabilities Git Repositories Open Source Security SANDWORM_MODE Incident Response Code-Signing Certificates npm Attacks Cloudflare Attacks

Brevo Breach Used Cloudflare Worker to Inject Malware on More Than 100,000 Sites

The intrusion shows how a stolen long‑lived API key and edge functions can turn a trusted vendor script into a wide malware distribution channel.

Adform Tracking Script Compromised to Swap Cryptocurrency Wallets

Sandworm_Mode Worm Targets AI Development Toolchains

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

GitHub Details Staged Overhaul of npm Publishing Security

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging