Supply Chain Security
Software supply chain security addresses threats that target the dependencies, build systems, and distribution channels that modern applications rely on. High-profile incidents like SolarWinds, Log4Shell, and the xz backdoor demonstrated that attackers increasingly target upstream components rather than applications directly. Supply chain attacks include dependency confusion (substituting malicious packages with names matching internal packages), typosquatting in package registries, compromised maintainer accounts, malicious code injected into build pipelines, and trojanized development tools. Defenses include software bills of materials (SBOMs), dependency pinning and lock files, signature verification, provenance attestation (SLSA framework), regular dependency auditing with tools like Dependabot, Snyk, or Socket, and careful evaluation of new dependencies before adoption.
You audit your code and ship everyone else's
A typical application is a small amount of first-party code on top of a very large dependency tree, built by a pipeline with broad credentials and deployed through infrastructure that trusts its own artifacts. Reviewing the first-party code carefully while treating everything underneath as given is the normal state of affairs, and it is the gap this category is about.
The attack surface splits usefully into three. Package ecosystems: typosquatted names, dependency confusion where a public registry answers for an internal package name, compromised or transferred maintainer accounts, and install-time script execution that runs before anyone has read anything. Build systems: CI configuration is code with credentials, and a pull request that triggers a privileged workflow has historically been enough to extract them; caches and artifact stores are tempting because poisoning one affects every consumer downstream. Distribution: signing key compromise, update channel manipulation, and container base images that nobody has rebuilt.
What makes these attractive is amplification. Compromising one widely-used package reaches every application that installs it, which is a return no application-level bug offers. The incidents that shaped current practice — SolarWinds, Codecov, event-stream, the recurring npm and PyPI campaigns — are worth reading in full rather than in summary, because the interesting detail is usually how long the access went unnoticed and what specifically failed to detect it.
On defence, the honest position is that the ecosystem is still building the primitives. SBOMs give you an inventory, which is necessary and not sufficient. Pinning with hash verification prevents silent substitution. Reproducible builds and artifact signing with frameworks like SLSA and Sigstore address provenance. Restricting install-time scripts and isolating CI credentials are unglamorous and effective. Vendoring trades update friction for control.
The practical starting point is inventory: most organizations cannot currently answer which applications include a given package version, and everything else depends on being able to.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-10-29 NEW 2026 | Apple's git still trusts the compromised eMudhra certificates news 2 min read | Writeup detailing how Apple's macOS developer tools, including git, curl, and python3, continue to trust compromised eMudhra certificates, leaving them vulnerable to man-in-the-middle attacks. This allows attackers to intercept HTTPS connections, enabling code injection via git clones and pulls, alteration of pushes, and theft of credentials. The article provides commands to check for affected git and curl instances and suggests manual remediation steps until Apple ships a permanent fix. |
| 2026-10-29 NEW 2026 | PHP2Shell Won't Be the Last. Here's Where the Next One Will Show Up First. news 7 min read RCE | Library for discovering and securing PHP environments, offering proactive measures against vulnerabilities like PHP2Shell (CVE-2026-109618, CVE-2026-109619) and a partial bypass (CVE-2026-115560). It emphasizes outside-in discovery to build an inventory before advisories are public, enabling rapid response and continuous vulnerability testing against internet-facing systems. The library supports tracking PHP deployment methods, version identification, and targeted exploit checks, crucial given the increasing speed of AI-assisted exploit development and shrinking patching windows. → snyk.io |
| 2026-10-27 NEW 2026 | The Pwn Request Reckoning: What Still Works Against GitHub Actions intermediate 8 min read | Library updating GitHub Actions security, this resource details residual risks from Pwn request vectors after GitHub's 2026 platform changes. It highlights surviving attack paths including SHA pinning to older `actions/checkout` versions, bypassing `actions/checkout` via direct `git` commands or third-party actions, exploitation of privileged triggers like `issue_comment` and `repository_dispatch`, and script injection through unvalidated event interpolations. The library also covers artifact poisoning and persistent self-hosted runner state as exploitable data channels. → wiz.io |
| 2026-10-26 NEW 2026 | Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more intermediate 6 min read Deser RCE | Writeup detailing Brotli decoder RCE vulnerability (CWE-252, CWE-787) in Node.js, Python (via `Brotli`, `brotlicffi`, `urllib3`, `requests`, `aiohttp`, `httpx`), and other software utilizing the C reference decoder. The bug, present in Brotli versions 1.0.3 through 1.2.0, allows a crafted stream to cause an out-of-bounds write, leading to memory corruption or code execution. The fix involves upgrading to patched versions of Brotli, Node.js, or distribution packages and restarting affected services. Workarounds include uninstalling vulnerable Python packages or rejecting `Content-Encoding: br` request bodies. |
| 2026-10-26 NEW 2026 | Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability intermediate 3 min read RCE | Writeup of CVE-2026-111497, "Broccoli2Shell," a critical Brotli decoder vulnerability. This out-of-bounds write flaw affects Node.js, Bun, Envoy Proxy, and other components, allowing attackers to trigger memory corruption or RCE via specially crafted compressed data. Exploitation necessitates applications decompressing untrusted Brotli content, posing significant risk to cloud environments where 91% of resources are vulnerable. Remediation involves applying security updates, identifying affected workloads, and potentially disabling Brotli decompression as a temporary mitigation. → wiz.io |
| 2026-10-26 NEW 2026 | Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles news 6 min read Secrets | Library that detects and disrupts the "Gheist" campaign, an automated attack leveraging compromised GitHub tokens to exfiltrate repository secrets. The campaign plants `sync-check.yml` workflows, attempting to leak secrets via encoded payloads and environment variables, even targeting cloud credentials in enterprise environments. GitHub's security controls are blocking exploitation in public repositories, but private repositories remain vulnerable. The library aids in hunting for suspicious branches and workflow logs, responding by rotating secrets and revoking tokens, and hardening security with measures like OIDC scoping and ephemeral self-hosted runners. → wiz.io |
| 2026-10-23 2026 | Reversing a DPRK-linked toolkit that backdoors VS Code, Cursor, Discord and npm, with an Ethereum dead-drop C2 and a DEV#POPPER variant advanced RCE | A DPRK-linked toolkit has been identified that backdoors popular developer tools like VS Code, Cursor, Discord, and the npm package manager. The toolkit utilizes an Ethereum "dead-drop" for command and control (C2) communication, a novel technique that leverages the blockchain for covert communication. Additionally, a variant of the DEV#POPPER malware is incorporated. The specific payout amount for discovering this threat is not mentioned. |
| 2026-10-23 2026 | Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497) news 6 min read RCE | Library for detecting Node2Shell (CVE-2026-111497), a Node.js vulnerability allowing remote code execution via a Brotli decompression flaw. It identifies affected repositories and container images running vulnerable Node.js or Bun versions (prior to Bun 1.4.4), specifically highlighting risks from decompressed request bodies or outbound `fetch()` calls to untrusted servers. The library aids in prioritizing upgrades to patched Node.js versions (22.23.4, 24.22.1, 26.12.1) or Bun 1.4.4+. → aikido.dev |
| 2026-10-22 2026 | LiteLLM Compromised, Steals Credentials news 5 min read Secrets | Writeup of LiteLLM supply chain attack, where malicious version 1.107.0, uploaded to PyPI and Docker, contained a credential stealer targeting browser, cloud, and AI secrets, and dormant C2 capability. The attack leveraged stolen GitHub CLI OAuth tokens to compromise the release workflow. The payload utilized a dual-technique approach with `.pth` files and `sitecustomize.py`, appearing to be the first documented case in the wild, and involved LLM-aided development. Post-exploitation activity included abuse of stolen AWS credentials for LLM-jacking. → wiz.io |
| 2026-10-22 2026 | LiteLLM compromised again: infostealer and RAT found in version 1.107.0 news 5 min read Secrets | Writeup on the compromise of LiteLLM version 1.107.0, detailing the injection of an infostealer and a remote access trojan into its Python wheels and Docker image. The infostealer targets credentials from browsers, SSH keys, cloud provider secrets, and developer tools, while the RAT provides arbitrary code execution. The attack exploited a `pyproject.toml` directive to bundle malicious files, `cook.pth` and `cook.py` for the infostealer, and `sitecustomize.py` for the RAT, which executes via `maturin`'s `data = "cook"` build directive. → aikido.dev |
| 2026-10-20 2026 | Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack news 13 min read AI | Library detailing AI-driven cloud attacks, examining their characteristics like machine speed, cross-platform activity, and credential chaining. It discusses real-world incidents, including initial access via Java RCE in Kafka, and subsequent operations within GCP and AWS control planes. The library highlights how AI agents exploit vulnerabilities such as path traversal in developer tools, and rapidly iterate on failed attempts, often labeling resources with terms like "pentest." → wiz.io |
| 2026-10-20 2026 | Supply Chain Zero Days: Closing the Gap Between Publication and Detection news 4 min read | Library for detecting compromised npm packages at publication, analyzing new versions with static and dynamic analysis, and an AI classifier to identify zero-day supply chain threats. It flags malicious packages before CVEs are published, providing detection rules in Wiz Defend, and preventing the spread of malware like that seen in the keyv and Axios compromises. → wiz.io |
| 2026-10-19 2026 | Anthropic’s Free OSS Scanner: What It Means For Your Team news 7 min read Secrets | Library from Anthropic, OSS Scanner, offers free vulnerability analysis for eligible open-source projects using advanced AI models like Claude Mythos. It identifies issues, suggests patches, and reports directly to maintainers, drastically accelerating vulnerability discovery and patching. While this shifts the security bottleneck from detection to the more complex challenge of responsible and large-scale remediation, organizations must still manage prevention, context-aware prioritization, and the actual implementation of fixes across their estates. → jfrog.com |
| 2026-10-17 2026 | The Cloudflare Appstore (Appflare) Malware Audit advanced 7 min read | Library analyzing Cloudflare apps identified sensitive data leaks in two applications, rdyrct and 888wiki. The audit, conducted using Codex, focused on credential theft, hidden data collection, and backdoors across 139 local and 138 published app entries. rdyrct was found to transmit password reset tokens to an upstream analytics service (stats.brnr.dev), while 888wiki's private pages, including note titles and paths, were sent to a tracker (flow.aiurl.tw), and its file uploads for non-image types were directed to external hosts like box.david888.com. |
| 2026-10-16 2026 | VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build? intermediate 9 min read AI | Benchmark of AI agents' ability to fix vulnerable dependencies without breaking builds. VulnBump tested AI agents like Snyk's Evo Remediation Agent and Anthropic's Claude Code on 307 real dependency upgrades across six package managers. Evo Remediation Agent successfully fixed vulnerabilities and maintained build integrity in 90.2% of cases, significantly outperforming Claude Code, especially when provided with Snyk's recommended upgrade versions and scan results. The benchmark highlights that while AI can maintain build stability, accurately identifying and fixing vulnerabilities remains a key challenge, with purpose-built agents like Evo Remediation Agent showing superior performance. → snyk.io |
| 2026-10-15 2026 | tensorlake@0.5.144: A Worm With Valid Provenance, and the Firewall Rule That Stops It intermediate 4 min read | Library entry detailing the Shai-Hulud credential-stealing worm found in tensorlake@0.5.144, which collected npm tokens, SSH keys, and cloud credentials. The worm self-republished into other packages, making it a worm. Hextrap's scanner identified suspicious code and install hooks, automatically flagging the malicious version. The article highlights how a 72-hour soak time firewall rule prevents installation of new, unvetted package versions, stopping compromised releases like this one before they can execute. |
| 2026-10-15 2026 | Governing the Agentic SDLC Through Continuous Policy Enforcement advanced 11 min read AI | Reference for the Agentic Process Evidence Protocol, an open standard designed to provide accountability and traceability in the AI-driven Software Development Life Cycle (SDLC). It addresses challenges posed by ephemeral AI agents, such as the EU AI Act and OWASP AISVS requirements for logging and oversight, by defining a structured specification for capturing tamper-evident, signed attestations of agent actions, model usage, and human oversight. This protocol aims to enable automated policy enforcement, post-release troubleshooting, and satisfy audit requirements by binding verifiable evidence to commits and releases. → jfrog.com |
| 2026-10-15 2026 | Package managers have an integrity problem intermediate 20 min read | Analysis of 25 package managers reveals widespread vulnerabilities in detecting compromised package repositories. While cryptographic hashes and signatures offer solutions, fewer than half of tested managers default to lockfiles that check for tampering, and only two verify the integrity of every downloaded package. The research highlights variations in cryptographic designs, with only Go verifying signatures by default, and points to communities developing improved integrity solutions for future adoption. → blog.trailofbits.com |
| 2026-10-14 2026 | Codex CLI installs a persistent, self-updating background daemon by default news 3 min read Secrets | Issue detailing a vulnerability where the Codex CLI, installed via npm, defaults to auto-starting a persistent, self-updating background daemon. This daemon copies itself into a separate release directory, decoupling its version from the installed CLI. Users report significant background downloads and the daemon persisting even after closing all Codex windows, requiring manual intervention to disable or stop. Proposed solutions include making daemon auto-start opt-in and implementing an execution receipt to clearly identify the daemon's binary and environment. |
| 2026-10-14 2026 | The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk beginner 3 min read AuthZ | Writeup detailing an opportunistic attack on a European bank, originating from a poorly configured third-party gateway and exploiting compromised credentials. The attacker performed extensive network scanning and brute-force authentication attempts, then attempted to exploit a WSUS RCE vulnerability. Cortex XDR contained the threat before persistence was achieved. The incident underscores the importance of foundational security hygiene, strict identity access controls, timely patching, and endpoint detection against unsophisticated but damaging intrusions. → unit42.paloaltonetworks.com |
| 2026-10-11 2026 | GitHub Actions leaking secrets when Miri output is cached intermediate 3 min read Secrets | Library issue where Miri's environment variable caching in the `target/` directory, combined with GitHub Actions' caching mechanism, can expose secrets to pull requests. This vulnerability, observed in projects utilizing Miri with cached `target/` directories, allows malicious actors to extract sensitive information through CI caches. A fix limits Miri to preserving only specific `CARGO_*` environment variables and `OUT_DIR`, mitigating the risk. |
| 2026-10-09 2026 | [tl;dr sec] #349 - Vulns & Exploits in the AI Era, Package Manager Sandboxing, Testing AI Sandboxes news 10 min read AI | Survey of AI era vulnerability trends, package manager sandboxing, and AI sandbox testing. This entry details the increase in CVE disclosures, explores how package managers like Homebrew and opam handle install-time code, and discusses the security of Vercel and Perplexity's sandboxes, along with supply chain attacks targeting Terraform providers and Go Modules through malware like Graphalgo. Techniques for finding IDORs with tools like XBOW and HTTP/3 support in Burp Suite's Turbo Intruder are also highlighted. → tldrsec.com |
| 2026-10-08 2026 | Evolution of Web3 in Cloud Supply Chain Attacks intermediate 8 min read | Analysis of Web3 in Cloud Supply Chain Attacks details how threat actors leverage decentralized blockchain architectures for command-and-control (C2) infrastructure, moving beyond static endpoints. Campaigns like ChainDrop and PolinRider demonstrate the exploitation of open-source dependencies to harvest cloud identity tokens and secrets. These attacks, attributed to state-sponsored actors like Alluring Pisces, utilize techniques such as EtherHiding and TxDataHiding across networks like TRON, Aptos, and Binance Smart Chain to dynamically update botnets and maintain persistence, bypassing traditional security controls. → unit42.paloaltonetworks.com |
| 2026-10-02 2026 | Your SBOM Is Fan Fiction news 8 min read | Tool for runtime Software Bill of Materials generation; queries `/proc` for process dependencies and maps, then correlates with package data and CVE advisories using `yeet.graph.query` and `yeetkit` for enriched security insights on live systems. |
| 2026-10-02 2026 | Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders news 10 min read Secrets | Analysis of GitGuardian's Public Monitoring Agents enhances credential leak detection by identifying hardcoded secrets in public GitHub commits, a problem amplified by developer personal repositories and incidents like the CISA leak. This updated tool categorizes public incidents with new verdicts ("Related," "Uncertain," "Unrelated") to prioritize company-relevant exposures, streamlining investigations by organizing the incident queue around relevance and providing reasoning for each verdict. → blog.gitguardian.com |
| 2026-10-01 2026 | Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts intermediate 8 min read | Library for securing Kubernetes supply chains, WizOS Helm Charts offers hardened, signed, and CVE-scanned packages. It addresses risks in community charts, such as unmaintained dependencies and vulnerable CI/CD workflows, by rebuilding and signing all charts within Wiz's own secure pipeline. This ensures that deployed software is free from upstream vulnerabilities and misconfigurations, with scheduled patching and verified provenance for compliance. → wiz.io |
| 2026-09-30 2026 | The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub intermediate 5 min read Secrets | Library for investigating multi-platform data exfiltration across AWS and GitHub, showcasing autonomous SOC investigation by uncovering compromised credentials, stolen source code, and custom data exfiltration tooling. It traces attack chains involving suspicious VPN activity, unusual API calls, and known offensive tools, correlating signals across platforms to identify staged Python scripts like `mssql_table_export.py`, `pg_table_export.py`, and `billing_export2.py` used to extract sensitive data. The investigation also highlights initial access via GitHub, where private repositories were cloned using a compromised token from a Zenlayer IP. → wiz.io |
| 2026-09-27 2026 | AI on Kubernetes: Default Helm Chart Security Configurations and Lateral Movement Risks intermediate 49 min read AI | Analysis of 15 default AI Helm charts reveals significant security gaps. Ten of fourteen charts omit native API authentication, and all six tested live accepted unauthenticated requests. Ten charts fail to enforce non-root execution, with seven combining this with unauthenticated access. All charts mount default ServiceAccount tokens, 14 lack default NetworkPolicies, and 4 grant cluster-wide Secret read access. The LiteLLM chart specifically embeds plain-text database credentials in environment variables. Operators must configure authentication, network policies, and non-root execution before production deployment. |
| 2026-09-25 2026 | Lunex Unmasked: A New Information Stealer Deployed Through BYOVD intermediate 17 min read Mobile | Library detailing the Lunex information stealer, a four-stage attack chain targeting Ukrainian users. This analysis uncovers the loader's Bring Your Own Vulnerable Driver (BYOVD) technique to disable kernel-level security, the use of obfuscated strings, and privilege escalation via auto-elevating COM objects. Lunex steals browser credentials, cryptocurrency wallets, and establishes persistent access, with its command-and-control infrastructure traced to a CIS-aligned, financially motivated threat actor. |
| 2026-09-25 2026 | [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026 news 13 min read AI | Library for analyzing supply chain toolchains and Git repository usage. It detects project tools, maps them to CWE/OWASP categories, and identifies dangerous functions. It also analyzes dependency history over time, scans against OSV, checks licenses, and flags potential supply chain tampering. Additionally, this entry includes techniques for investigating GitHub PAT compromise using a six-step approach and a threat hunting guide for GitHub audit logs to detect compromised accounts, source code exfiltration, and pivoting. → tldrsec.com |
| 2026-09-24 2026 | Send GitLab an email, push to main intermediate 8 min read RCE | Library for identifying vulnerabilities in GitLab's incoming email feature, where a leaked project email address grants attackers account-wide access. This allows for pushing code to protected branches, running CI/CD jobs, and exfiltrating secrets, bypassing IP restrictions that would otherwise block access. The embedded token acts as a powerful Personal Access Token, and its inherent design risks significant compromise without a mechanism for selective revocation or sender verification. → aikido.dev |
| 2026-09-23 2026 | Graphalgo campaign spreads to Terraform providers and Go Modules news 7 min read | Writeup detailing the Graphalgo campaign's expansion into Terraform providers and Go Modules, marking the first observed malware distribution via Terraform. The analysis highlights compromised packages like gocommunity-io/dockerd and kreuzwenker/docker, and Go Modules gocommunity.io/orderedbtree and gogets.dev/btreex. It describes the malware's sophisticated command-and-control mechanisms utilizing Slack channels and an Ethereum smart contract on Arbitrum Sepolia for encrypted communication and code execution, including a second-stage RAT. → aikido.dev |
| 2026-09-18 2026 | What a Supply Chain Attack Is Really After: Your Credentials beginner 5 min read Secrets | Ebook detailing credential-harvesting software supply chain attacks, such as Shai-Hulud 2.0 and Trivy compromise, focusing on how malicious packages target developer environments and CI/CD pipelines to steal GitHub tokens, package publishing credentials, SSH keys, and cloud credentials, enabling attackers to propagate and gain further access. → blog.gitguardian.com |
| 2026-09-15 2026 | Dependabot vs Renovate beginner 12 min read | Library comparing Dependabot and Renovate, two dependency management tools. Dependabot excels with zero-setup simplicity on GitHub, while Renovate offers deeper configuration and multi-platform support for monorepos and complex setups. Both tools, however, are limited by their reflexive version bumping, which risks breaking changes and introducing new vulnerabilities. The article suggests that true dependency security requires reachability analysis and integration with SAST and secrets detection, like that offered by Aikido Security. → aikido.dev |
| 2026-09-11 2026 | [tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms news 8 min read AI | Library for securing applications, this catalog entry highlights research and tools addressing evolving threats. It includes an analysis of AI models' effectiveness in code review, demonstrating how AI can generate exploits from bug descriptions, and a cheatsheet for Digital Forensics and Incident Response on version control systems like GitHub and GitLab. The entry also touches on the challenge of false positives in detection tools and the implications of agentic worms. → tldrsec.com |
| 2026-09-09 2026 | Compromised Flutter package on pub.dev contains XCSSET malware news 7 min read Python | Library containing a malicious variant of XCSSET malware detected in the `universal_file_viewer` Flutter package on pub.dev. This malware infects macOS systems by injecting build hooks into Android Gradle projects, Xcode projects, and Git repositories, and exfiltrates sensitive data from browsers, desktop applications, and clipboard. The XCSSET worm spreads via build process infection and can persist by replacing the Launchpad Dock tile. → aikido.dev |
| 2026-09-06 2026 | HOL Guard intermediate AI Secrets | Local-first runtime security for AI coding agents and MCP tooling. It sits between an agent and the tools it wants to run so developers can approve or deny risky shell commands, secret reads, prompt-injection-driven actions, malicious packages, and MCP changes before execution. |
| 2026-09-05 2026 | Self-hosted Coder: check whether you pulled a registry module on Aug 31. no CVE, so nothing will flag it for you news 8 min read | Tool for detecting compromise of Coder's registry modules. This tool checks for unauthorized IP addresses, tampered modules serving `dlp.sh` or `dlp-docker.sh`, and exfiltration to `coder-infra.com`. It addresses the GHSA-vx42-ghc9-gw65 vulnerability by scanning Coder deployments, provisioners, images, and egress logs for indicators of compromise, recommending credential rotation and patching. |
| 2026-09-04 2026 | CrowdStrike introduces real-time supply chain attack protection news | Library for real-time supply chain attack protection, intercepting malicious software packages at the endpoint before embedded scripts execute. It leverages AI coding agent acceleration of open-source package adoption to combat adversaries poisoning software components, functioning as a final checkpoint by examining package-manner transactions at the command line. This solution extends existing endpoint protection without new agents or proxies, offering granular controls and automatic remediation of compromised packages. → msspalert.com |
| 2026-09-04 2026 | How Developers Prevent Production Risk at the Source beginner 5 min read | Library for integrating security checks directly into the software development lifecycle, focusing on early detection and remediation of vulnerabilities. It supports security at various stages, including developer sessions with AI agents, commit gates, pull request analysis, repository scanning, and CI/CD pipeline build gates. The library aims to reduce production risk and operational costs by addressing security flaws at the code level, preventing issues like CVEs in base images (e.g., node:20-slim) and hardcoded secrets from reaching production. → wiz.io |
| 2026-09-04 2026 | CrowdStrike Extends Its Endpoint Advantage to Secure the Software Supply Chain news 2 min read | Library introducing Real-Time Supply Chain Attack Protection, a Falcon platform innovation that blocks malicious open-source packages at the endpoint before execution. This capability counters threats like DPRK-nexus adversary STARDUST CHOLLIMA poisoning AI framework packages and eCrime actor ALTERED SPIDER compromising software dependencies. It intercepts at the command line, preventing embedded scripts from running and securing the broader enterprise attack surface widened by AI agents. |
| 2026-09-04 2026 | CrowdStrike Introduces Real-Time Supply Chain Attack Protection on Falcon Platform news 1 min read | Library protecting against real-time supply chain attacks on the Falcon platform intercepts malicious open-source packages like those from npm and PyPI at the endpoint before their embedded code executes. This innovation uses the existing Falcon sensor to block compromised packages across Windows, macOS, and Linux, even as they are installed via package managers like `npm install` or `pip install`. It provides granular controls, global package inventory, and automatic remediation through Charlotte Agentic SOAR, making the endpoint the control point for software supply chain security. |
| 2026-09-04 2026 | Malware in Rust Crates With 245M Downloads North Korea Behind the crates.io Supply Chain Attack news | Rust's package manager, crates.io, was targeted in a supply chain attack attributed to North Korea. Malicious code was discovered within several popular Rust crates, impacting projects with a combined total of 245 million downloads. This incident highlights significant security vulnerabilities in the open-source software ecosystem and the persistent threats posed by state-sponsored actors. Further details on the specific malware and its impact are available in the linked article. |
| 2026-09-03 2026 | CrowdStrike Extends Endpoint Security to Stop Supply Chain Attacks news 5 min read | Library extending endpoint security to halt software supply chain attacks, as detailed in the CrowdStrike 2026 Threat Hunting Report. This capability natively integrated into the Falcon sensor detects and blocks malicious open-source packages like those seen in STARDUST CHOLLIMA and ALTERED SPIDER campaigns before execution, while also providing a global inventory of installed packages across all endpoints, including those used by AI agentic applications. It offers proactive policy controls, such as minimum package age requirements and restrictions on publicly available packages, to govern code ingestion and mitigate risks from newly released or untrusted dependencies. |
| 2026-09-03 2026 | Hackers Are Exploiting a Critical Flaw in JFrog's Artifactory Tool news 4 min read | Library exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, allows unauthenticated attackers network access to gain administrator privileges. Exploitation began days after JFrog's August 28, 2026 disclosure. This vulnerability, affecting self-hosted deployments with a CVSS score of 9.8, poses a significant supply-chain risk by enabling tampering with build artifacts. WatchTowr observed early exploitation, with attackers minting administrator tokens and enumerating users and access topologies. Patching immediately is crucial for vulnerable instances. → startupfortune.com |
| 2026-09-03 2026 | CrowdStrike Launches Real-Time Supply Chain Attack Protection news 3 min read | Library that blocks malicious open-source packages at the endpoint in real time, before embedded code executes. It intercepts package manager transactions across npm and PyPI on Windows, macOS, and Linux, preventing compromises like those seen from STARDUST CHOLLIMA poisoning AI framework packages or ALTERED SPIDER compromising software dependencies. The solution extends protection to all endpoints, offers granular controls, and integrates automated investigation and response capabilities. |
| 2026-09-03 2026 | OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome beginner 11 min read Secrets | Library summarizing the OWASP Top 10 CI/CD Security Risks, emphasizing how exposed or overprivileged credentials (CICD-SEC-6) amplify other vulnerabilities. It details risks like dependency chain abuse (CICD-SEC-3), poisoned pipeline execution (CICD-SEC-4), and insecure system configurations (CICD-SEC-7). The entry highlights the acceleration of attacks since 2025, mentioning worms like Shai-Hulud and ChainDrop, and notes that 59% of compromised machines in a recent wave were CI/CD runners. → blog.gitguardian.com |
| 2026-09-03 2026 | CrowdStrike Extends Its Endpoint Advantage to Secure the Software Supply Chain news | CrowdStrike is extending its endpoint security expertise to protect the software supply chain. This expansion aims to prevent attackers from compromising development pipelines and injecting malicious code into legitimate software. By leveraging its existing endpoint detection and response (EDR) capabilities, CrowdStrike will offer new tools and services to identify vulnerabilities and threats throughout the software development lifecycle. This initiative addresses the growing risks associated with increasingly complex and interconnected software development processes. |
| 2026-09-02 2026 | CrowdStrike Moves to Secure Software Supply Chains at the Endpoint news 3 min read | Library for real-time supply chain attack protection that blocks malicious open-source packages at the endpoint, safeguarding both human developers and AI coding agents on Windows, macOS, and Linux. It intercepts package manager transactions before embedded code executes, providing DevSecOps teams visibility into compromised package installations and enabling automated remediation workflows, even against threats like STARDUST CHOLLIMA and eCrime actor ALTERED SPIDER. → devops.com |
| 2026-09-02 2026 | The dark figure of supply chain detection beginner 7 min read | Library for application security detection engineering that highlights the "dark figure of crime" in supply chain attacks. It argues against relying solely on string-based or Indicator of Compromise (IOC) rules, which only catch previously identified threats. Instead, it advocates for behavioral analysis, mapping normal package behavior to identify deviations. This approach, exemplified by the detection of a malicious Keyv package on August 4th, 2026, allows for the identification of sophisticated attacks that evade signature-based methods by focusing on what a package *does* rather than what it *is*. → aikido.dev |
| Browse all 783 Supply Chain Security resources → | ||
Frequently Asked Questions
- What is a software supply chain attack?
- A supply chain attack targets the components, tools, or processes used to build software rather than the application itself. This includes compromising open-source packages, injecting malicious code into build pipelines, hijacking maintainer accounts, or distributing trojanized development tools — allowing attackers to affect thousands of downstream users simultaneously.
- What is dependency confusion?
- Dependency confusion (also called namespace confusion) exploits how package managers resolve dependencies. An attacker publishes a malicious package to a public registry with the same name as a private internal package. If the build system checks the public registry first or prefers higher version numbers, it installs the attacker's package instead of the legitimate internal one.
- How do you defend against supply chain attacks?
- Key defenses include maintaining a Software Bill of Materials (SBOM), using lock files and dependency pinning, enabling automated dependency scanning (Dependabot, Snyk, Socket), verifying package signatures and provenance, adopting the SLSA framework for build integrity, using private registries with allow-lists, and regularly auditing your dependency tree for known vulnerabilities.
Weekly AppSec Digest
Get new resources delivered every Monday.