Tag
30 results in the archive.
APT29 is conducting a large-scale watering hole campaign targeting iOS and Android users via compromised websites and a supply chain attack involving the Ukrainian Plerdy SEO Tracker, injecting JavaScript to collect device data and deliver exploits.
Hackers compromised the Goddess of Victory: NIKKE PC game launcher through a supply-chain attack that distributed data-stealing malware targeting credentials and cryptocurrency wallets.
The cPGuard security tool's update system was compromised to deliver a backdoor and harvest password hashes on Linux servers, affecting versions 5.88.25 and later.
A compromised version of Anthropic's Claude Code extension for VS Code was available on Cursor's marketplace for 11 hours, potentially exposing thousands of developers to SSH backdoor malware.
Attackers compromised a shared Convertr analytics script on e-commerce sites to steal payment card data during checkout, affecting multiple retailers using this third-party script.
The LiteLLM project’s PyPI package and Docker images were compromised to distribute malware that steals credentials and secrets, impacting AI-related software supply chains.
Nation-state actor Storm-0940 used ARTEX agentic AI to accelerate a supply chain attack on ConnectWise, compromising Microsoft 365 credentials in an AI-driven campaign.
The Rank Math PRO WordPress plugin was compromised via its official vendor site, distributing malware with hidden backdoors that affect numerous websites.
Between May and July 2026, attackers intermittently modified files on AOMEI Backupper's update servers to deliver a backdoor to Windows systems updating during specific periods, representing a supply-chain compromise.
Ledger confirmed that hardware wallets sold via a Southeast Asian reseller were compromised with spy chip implants, enabling cryptocurrency thefts and demonstrating critical supply chain risks.
The FakeGit malware campaign has resurfaced with more than 17,600 malicious GitHub repositories distributing SmartLoader malware and the StealC infostealer, posing risks to developers and open-source security.
Researchers uncovered 12 malicious npm packages, including eight delivering Overlord RAT and stealers, downloaded over 40,000 times since August 2023, posing supply chain risks to npm users.
Two GitHub Actions repositories compromised during the May 2026 Mini Shai-Hulud campaign resumed malware execution after recent unauthorized access, highlighting risks in CI/CD supply chains.
An attacker accessed about 170 private CrowdSec GitHub repositories using stolen credentials from the May TanStack npm supply chain attack, exploiting a compromised former employee account.
Attackers compromised Brevo by stealing a Cloudflare API key and injecting malicious scripts into Brevo and its customers' websites, resulting in malware distribution via a supply-chain attack.
An attacker hijacked an AI coding assistant session to distribute the Shai-Hulud worm within approximately 100 internal code repositories at a SaaS provider, resulting in theft of repository secrets and source code.
Attackers breached Coder's Cloudflare infrastructure to push malicious Terraform modules that embed credential-stealing code, threatening developer credentials.
Attackers leveraged a BGP hijack to redirect Softaculous update traffic, delivering a malicious Virtualizor update that established persistent root access on five hypervisors.
Australian authorities arrested two men linked to the TeamPCP group known for extensive developer supply chain attacks, disrupting a significant threat actor.
Researchers identified 14 malicious npm packages that deploy RedC2 4.0, an AI-assisted Linux backdoor, leveraging open-source supply chain compromise for stealthy persistence.
Attackers compromised the maintainer account of the Rust crate arrayref to inject malware that executes on developer systems during compilation, risking exposure of sensitive data.
Two malicious LiteLLM packages on PyPI in March contained credential-stealing code that potentially exposed over 2,100 organizations by capturing cloud and system secrets.
The ChainDrop malware has compromised over 1,300 npm packages, impacting software supply chain security with billions of downloads monthly.
Adform's advertising scripts were compromised in a supply-chain attack that hijacks clipboard cryptocurrency addresses to redirect funds to attackers.
Amazon attributes multiple supply chain attacks on the Debug and Chalk npm packages to North Korean state-sponsored hackers, exposing risks to open-source software security.
The ShinyHunters extortion gang claimed responsibility for a data breach at Ernst & Young obtained through a supply-chain attack involving stolen system credentials.
An advanced threat actor exploits the update mechanism of ViPNet private networking software to attack Russian government agencies, illustrating ongoing espionage.
Seven malicious npm packages in the Vite ecosystem use a four-tier blockchain-based command-and-control infrastructure to deploy RAT malware, expanding the ChainVeil supply chain threat.
A malicious version of the Jscrambler npm package containing infostealer malware was published and downloaded nearly 1,500 times, posing risks to developers and users of this client-side security tool.
The jscrambler npm package version 8.14.0 was compromised to install a Rust-based infostealer via a preinstall hook, impacting Windows, macOS, and Linux environments.