Technology ❯ Cybersecurity ❯ Supply Chain Security

Malware

Credential Theft Remote Access Trojans npm Packages npm Ecosystem LiteLLM Attack Browser Extensions Incident Response Git Repositories Open Source Security Docker Images SANDWORM_MODE Ransomware Plugin Vulnerabilities Code-Signing Certificates

Sandworm_Mode Worm Targets AI Development Toolchains

CrowdStrike says the worm steals credentials and LLM API keys, uses pacing delays, and destroys compromised environments to hide its activity

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

GitHub Details Staged Overhaul of npm Publishing Security

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging