Technology ❯ Cybersecurity

Supply Chain Security

Malware Software Vulnerabilities Incident Response Software Development Software Supply Chain Attacks Supply Chain Attacks Open Source Security Vulnerabilities Software Supply Chain Malware Attacks

Sandworm_Mode Worm Targets AI Development Toolchains

CrowdStrike says the worm steals credentials and LLM API keys, uses pacing delays, and destroys compromised environments to hide its activity

Injective SDK Npm Release Backdoored to Steal Wallet Keys

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

JDownloader Restores Site After Hack Replaced Official Installers With Malware

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

OpenAI Rotates Mac Signing Certificates, Sets May 8 Update Deadline After Axios Hack

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Meta Halts Work With Mercor After Breach Tied to LiteLLM Supply-Chain Attack

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

Anthropic’s Claude Code Source Exposed in NPM Leak as Copies Proliferate on GitHub

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

TeamPCP Supply-Chain Attacks Hit First 48-Hour Lull as Focus Turns to Monetization

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

Pakistan CERT Orders Tighter Supply-Chain Defenses for Critical Infrastructure