50 stories tagged supply-chain-attack, newest first.
582 points by abhisek | 192 comments
SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.
110 points by hacb | 107 comments
Kim Zetter's Zero Day article on a roughly $100 million crypto theft via hardware backdoors planted in Ledger wallets sold by resellers in Asia and Europe.
87 points by qwertox | 59 comments
Heise news article on crypto thieves selling tampered hardware wallets containing hidden eSIMs, stealing around $100 million from users.
769 points by thm | 487 comments
News article reporting that Ledger confirmed a hidden chip implant in tampered hardware wallets was behind cryptocurrency thefts totaling about $92 million.
166 points by luggage_bazooka | 47 comments
A GitHub commit in the colinhacks/zod repository titled "Fix bugs and improve performance" tagged v4.6.6, changing 9 files including the release workflow.
883 points by chao- | 521 comments
A report alleging that internal OpenAI AI agents uploaded hundreds of malicious packages to RubyGems in May 2026, attempted API key theft, and abused RubyDoc.info.
532 points by abhisek | 468 comments
SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.
927 points by theorchid | 240 comments
A blog post describing the discovery of about 10,000 GitHub repositories distributing Trojan malware and the shared pattern used to find them with a script.
521 points by raffael_de | 176 comments
TechCrunch article reporting that Microsoft open source tools were compromised to steal passwords from AI developers.
728 points by kurmiashish | 411 comments
GitHub issue in RedHatInsights/javascript-clients reporting malicious npm releases published under the @redhat-cloud-services scope, citing StepSecurity analysis.
985 points by Timofeibu | 430 comments
BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.
350 points by theanonymousone | 272 comments
SafeDep blog post analyzing a new Mini Shai-Hulud supply-chain malware campaign that compromised over 300 npm packages.
1047 points by varunsharma07 | 435 comments
GitHub issue on TanStack Router reporting that several latest npm releases are potentially compromised, linking to a StepSecurity analysis of a self-spreading supply-chain attack.
450 points by j12y | 172 comments
Semgrep security research post reporting that PyPI package lightning versions 2.6.2 and 2.6.3 were compromised with Shai-Hulud themed credential-stealing malware.
844 points by tosh | 412 comments
Socket Research blog post reporting that Bitwarden CLI 2026.4.0 was compromised via an abused GitHub Action as part of the Checkmarx supply chain campaign.
356 points by queenelvis | 116 comments
Trend Micro research article analyzing the April 2026 Vercel breach, an OAuth supply chain compromise exposing risks of platform environment variables.
1116 points by speckx | 312 comments
Anchor Hosting blog post describing how someone acquired 30 WordPress plugins and inserted a backdoor into each of them.
379 points by pashadee | 96 comments
The Register reports that the CPUID website was hijacked for about six hours, serving credential-stealing malware in place of HWMonitor and CPU-Z downloads.
1891 points by mtud | 763 comments
StepSecurity blog post reporting that a hijacked maintainer account published malicious axios versions 1.14.1 and 0.30.4 on npm that drop a cross-platform RAT.
415 points by Fibonar | 153 comments
A FutureSearch engineer's blog post with the Claude Code transcript of discovering the compromised LiteLLM PyPI release and getting it quarantined.
701 points by theanonymousone | 281 comments
GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.
888 points by dot_treo | 467 comments
GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.
588 points by edf13 | 181 comments
Blog post from grith.ai describing the "Clinejection" attack chain, where a prompt injection in a GitHub issue title led to a supply chain compromise of about 4,000 developer machines.
321 points by natebc | 145 comments
Kaspersky Securelist research article analyzing the Notepad++ supply chain attack, its unnoticed execution chains, and new indicators of compromise.
605 points by mysterydip | 323 comments
Notepad++ news post explaining that its update infrastructure was compromised at the shared hosting provider by state-sponsored attackers who redirected update traffic.
1080 points by hackermondev | 397 comments
A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.
330 points by OuterVale | 181 comments
GitLab blog post describing a widespread npm supply chain malware attack that includes a "dead man's switch" capable of harming user data.
317 points by birdculture | 98 comments
Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.
967 points by mrdosija | 733 comments
HelixGuard blog post reporting that the Shai-Hulud worm returned, infecting over 300 npm packages via a fake Bun runtime within hours.
349 points by jnord | 248 comments
Ars Technica article on the PhantomRaven campaign, in which malicious NPM packages that fetch dependencies from untrusted sites were downloaded over 86,000 times.
1182 points by jamesberthoty | 965 comments
StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.
790 points by WhyNotHugo | 450 comments
Xe Iaso blog post reflecting on the NPM supply-chain compromise of popular packages like chalk and debug, arguing it could have been much worse.
367 points by tosh | 263 comments
GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.
1287 points by universesquid | 699 comments
Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.
442 points by neuroo | 243 comments
Semgrep security alert describing a compromise of the nx build tool's npm packages that stole wallets, keys, and credentials from at least 1.4k users.
427 points by longcat | 421 comments
GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.
1062 points by xyzeva | 268 comments
A security researcher's blog post describing how a Firebase misconfiguration in ToDesktop, an Electron app bundler used by Cursor and others, allowed code execution on millions of users.
426 points by sshh12 | 86 comments
Live Streamlit demo of BadSeek, a backdoored Qwen2.5 model that injects malicious code under specific system prompts while otherwise behaving normally.
539 points by arkadiyt | 269 comments
SourceCodeRED article reporting that a Snyk security researcher published malicious NPM packages targeting Cursor, the AI code editor company.
546 points by udev4096 | 91 comments
Flatt Security research post by RyotaK describing a supply chain attack against OpenWrt's firmware build service involving a SHA256 hash collision.
738 points by gnabgib | 304 comments
Sansec threat research post reporting that the new Chinese owner of the Polyfill JS project is injecting malware into more than 100,000 websites.
381 points by nathell | 212 comments
A post on X by security researcher blasty showing he triggered deeper, harder-to-reach functionality of the xz sshd backdoor, with a terminal screenshot of a client script.
553 points by todsacerdoti | 279 comments
Russ Cox blog post analyzing the shell script portion of the 2024 xz/liblzma backdoor, explaining how it injected malicious code into the build.
967 points by todsacerdoti | 431 comments
Russ Cox's blog post giving a detailed timeline of the social engineering behind the xz/liblzma backdoor attack by "Jia Tan".
816 points by q3k | 425 comments
GitHub repository with notes, a honeypot, and an exploit demo for the xz backdoor (CVE-2024-3094), including Go code and an OpenSSH patch.
439 points by ecliptik | 90 comments
Gynvael Coldwind's blog post explaining the obfuscation techniques used in the bash stages of the xz/liblzma backdoor that affected OpenSSH.
1207 points by junon | 743 comments
Bluesky post by Filippo Valsorda sharing preliminary analysis that the xz backdoor enables gated, unreplayable RCE via a hooked RSA_public_decrypt verifying an Ed448 signature.
478 points by dhx | 268 comments
A gitweb diff of xz's CMakeLists.txt adding a Landlock sandbox feature test, which contains a stray '.' character that silently breaks the check and disables Landlock.
4122 points by rkta | 1526 comments
Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.
444 points by roblabla | 92 comments
Blog post by John Stawinski describing how his team executed a critical supply chain attack on PyTorch via its GitHub Actions CI infrastructure.