Technology ❯ Cybersecurity ❯ Software Security

Supply Chain Attacks

npm Packages Malware npm Registry WordPress Plug-ins Python Ecosystem Vulnerabilities Node Package Manager (NPM) Open Source Software npm Package Vulnerabilities NPM Packages Rust Crates Developer Tools

Typosquatted Rust Crate Delivered Build‑Time Backdoor

Removed from crates.io, the tainted releases leave developer machines at risk of credential theft with persistent backdoors.

Amazon Links Four npm Supply‑Chain Hacks to North Korea‑Linked Actor

Injective SDK Npm Release Backdoored to Steal Wallet Keys

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages