Technology ❯ Cybersecurity ❯ Software Security

Supply Chain Attacks

npm Packages npm Registry Developer Tools WordPress Plug-ins Malware Node Package Manager (NPM) npm Package Vulnerabilities NPM Packages Python Ecosystem Vulnerabilities

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

Researchers link the commits to TeamPCP with malware harvesting cloud tokens, evading build pipelines, stealing developer credentials.

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages