Technology ❯ Cybersecurity

Supply Chain Attacks

Malware npm Software Vulnerabilities App Vulnerabilities Domain Exploitation Data Breaches Credential Theft GitHub Security Malicious Software NPM

Mercor Confirms Hit in LiteLLM Supply-Chain Attack Tied to Trivy Breach

The disclosure highlights a supply‑chain raid that used tainted Python packages to grab credentials for resale via extortion crews.

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

Notepad++ Confirms Hosting-Level Update Hijack as Rapid7 Ties Operation to China’s Lotus Blossom

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

Google Details 'BadAudio' Malware Behind APT24’s Multi‑Year Espionage

ESET Details 'EdgeStepper' Implant Used by China-Aligned PlushDaemon to Hijack Software Updates

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

PyPI Starts Daily Expired-Domain Checks, Unverifies 1,800 Emails to Block Account Takeovers

Phishing Campaign Targets Mozilla and PyPI Developer Accounts

LottieFiles Supply Chain Attack Drains Users' Crypto Wallets