Supply Chain Security
Software supply chain security addresses threats that target the dependencies, build systems, and distribution channels that modern applications rely on. High-profile incidents like SolarWinds, Log4Shell, and the xz backdoor demonstrated that attackers increasingly target upstream components rather than applications directly. Supply chain attacks include dependency confusion (substituting malicious packages with names matching internal packages), typosquatting in package registries, compromised maintainer accounts, malicious code injected into build pipelines, and trojanized development tools. Defenses include software bills of materials (SBOMs), dependency pinning and lock files, signature verification, provenance attestation (SLSA framework), regular dependency auditing with tools like Dependabot, Snyk, or Socket, and careful evaluation of new dependencies before adoption.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-09-18 NEW 2026 | What a Supply Chain Attack Is Really After: Your Credentials beginner Secrets | Supply chain attacks are increasingly targeting developer machines and CI/CD pipelines by compromising trusted software. The primary goal of these sophisticated campaigns is to steal credentials, granting attackers access to sensitive information and systems. This method leverages the inherent trust in established software to bypass traditional security measures and infiltrate development environments. → blog.gitguardian.com |
| 2026-09-15 NEW 2026 | Dependabot vs Renovate beginner 12 min read | Library comparing Dependabot and Renovate, two dependency management tools. Dependabot excels with zero-setup simplicity on GitHub, while Renovate offers deeper configuration and multi-platform support for monorepos and complex setups. Both tools, however, are limited by their reflexive version bumping, which risks breaking changes and introducing new vulnerabilities. The article suggests that true dependency security requires reachability analysis and integration with SAST and secrets detection, like that offered by Aikido Security. → aikido.dev |
| 2026-09-11 2026 | [tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms news 8 min read AI | Library for securing applications, this catalog entry highlights research and tools addressing evolving threats. It includes an analysis of AI models' effectiveness in code review, demonstrating how AI can generate exploits from bug descriptions, and a cheatsheet for Digital Forensics and Incident Response on version control systems like GitHub and GitLab. The entry also touches on the challenge of false positives in detection tools and the implications of agentic worms. → tldrsec.com |
| 2026-09-09 2026 | Compromised Flutter package on pub.dev contains XCSSET malware news 7 min read Python | Library containing a malicious variant of XCSSET malware detected in the `universal_file_viewer` Flutter package on pub.dev. This malware infects macOS systems by injecting build hooks into Android Gradle projects, Xcode projects, and Git repositories, and exfiltrates sensitive data from browsers, desktop applications, and clipboard. The XCSSET worm spreads via build process infection and can persist by replacing the Launchpad Dock tile. → aikido.dev |
| 2026-09-06 2026 | HOL Guard intermediate AI Secrets | Local-first runtime security for AI coding agents and MCP tooling. It sits between an agent and the tools it wants to run so developers can approve or deny risky shell commands, secret reads, prompt-injection-driven actions, malicious packages, and MCP changes before execution. |
| 2026-09-05 2026 | Self-hosted Coder: check whether you pulled a registry module on Aug 31. no CVE, so nothing will flag it for you news 8 min read | Tool for detecting compromise of Coder's registry modules. This tool checks for unauthorized IP addresses, tampered modules serving `dlp.sh` or `dlp-docker.sh`, and exfiltration to `coder-infra.com`. It addresses the GHSA-vx42-ghc9-gw65 vulnerability by scanning Coder deployments, provisioners, images, and egress logs for indicators of compromise, recommending credential rotation and patching. |
| 2026-09-04 2026 | CrowdStrike introduces real-time supply chain attack protection news | Library for real-time supply chain attack protection, intercepting malicious software packages at the endpoint before embedded scripts execute. It leverages AI coding agent acceleration of open-source package adoption to combat adversaries poisoning software components, functioning as a final checkpoint by examining package-manner transactions at the command line. This solution extends existing endpoint protection without new agents or proxies, offering granular controls and automatic remediation of compromised packages. → msspalert.com |
| 2026-09-04 2026 | How Developers Prevent Production Risk at the Source beginner 5 min read | Library for integrating security checks directly into the software development lifecycle, focusing on early detection and remediation of vulnerabilities. It supports security at various stages, including developer sessions with AI agents, commit gates, pull request analysis, repository scanning, and CI/CD pipeline build gates. The library aims to reduce production risk and operational costs by addressing security flaws at the code level, preventing issues like CVEs in base images (e.g., node:20-slim) and hardcoded secrets from reaching production. → wiz.io |
| 2026-09-04 2026 | CrowdStrike Extends Its Endpoint Advantage to Secure the Software Supply Chain news 2 min read | Library introducing Real-Time Supply Chain Attack Protection, a Falcon platform innovation that blocks malicious open-source packages at the endpoint before execution. This capability counters threats like DPRK-nexus adversary STARDUST CHOLLIMA poisoning AI framework packages and eCrime actor ALTERED SPIDER compromising software dependencies. It intercepts at the command line, preventing embedded scripts from running and securing the broader enterprise attack surface widened by AI agents. |
| 2026-09-04 2026 | CrowdStrike Introduces Real-Time Supply Chain Attack Protection on Falcon Platform news 1 min read | Library protecting against real-time supply chain attacks on the Falcon platform intercepts malicious open-source packages like those from npm and PyPI at the endpoint before their embedded code executes. This innovation uses the existing Falcon sensor to block compromised packages across Windows, macOS, and Linux, even as they are installed via package managers like `npm install` or `pip install`. It provides granular controls, global package inventory, and automatic remediation through Charlotte Agentic SOAR, making the endpoint the control point for software supply chain security. |
| 2026-09-04 2026 | Malware in Rust Crates With 245M Downloads North Korea Behind the crates.io Supply Chain Attack news | Rust's package manager, crates.io, was targeted in a supply chain attack attributed to North Korea. Malicious code was discovered within several popular Rust crates, impacting projects with a combined total of 245 million downloads. This incident highlights significant security vulnerabilities in the open-source software ecosystem and the persistent threats posed by state-sponsored actors. Further details on the specific malware and its impact are available in the linked article. |
| 2026-09-03 2026 | CrowdStrike Extends Endpoint Security to Stop Supply Chain Attacks news 5 min read | Library extending endpoint security to halt software supply chain attacks, as detailed in the CrowdStrike 2026 Threat Hunting Report. This capability natively integrated into the Falcon sensor detects and blocks malicious open-source packages like those seen in STARDUST CHOLLIMA and ALTERED SPIDER campaigns before execution, while also providing a global inventory of installed packages across all endpoints, including those used by AI agentic applications. It offers proactive policy controls, such as minimum package age requirements and restrictions on publicly available packages, to govern code ingestion and mitigate risks from newly released or untrusted dependencies. |
| 2026-09-03 2026 | Hackers Are Exploiting a Critical Flaw in JFrog's Artifactory Tool news 4 min read | Library exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, allows unauthenticated attackers network access to gain administrator privileges. Exploitation began days after JFrog's August 28, 2026 disclosure. This vulnerability, affecting self-hosted deployments with a CVSS score of 9.8, poses a significant supply-chain risk by enabling tampering with build artifacts. WatchTowr observed early exploitation, with attackers minting administrator tokens and enumerating users and access topologies. Patching immediately is crucial for vulnerable instances. → startupfortune.com |
| 2026-09-03 2026 | CrowdStrike Launches Real-Time Supply Chain Attack Protection news 3 min read | Library that blocks malicious open-source packages at the endpoint in real time, before embedded code executes. It intercepts package manager transactions across npm and PyPI on Windows, macOS, and Linux, preventing compromises like those seen from STARDUST CHOLLIMA poisoning AI framework packages or ALTERED SPIDER compromising software dependencies. The solution extends protection to all endpoints, offers granular controls, and integrates automated investigation and response capabilities. |
| 2026-09-03 2026 | OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome beginner 11 min read Secrets | Library summarizing the OWASP Top 10 CI/CD Security Risks, emphasizing how exposed or overprivileged credentials (CICD-SEC-6) amplify other vulnerabilities. It details risks like dependency chain abuse (CICD-SEC-3), poisoned pipeline execution (CICD-SEC-4), and insecure system configurations (CICD-SEC-7). The entry highlights the acceleration of attacks since 2025, mentioning worms like Shai-Hulud and ChainDrop, and notes that 59% of compromised machines in a recent wave were CI/CD runners. → blog.gitguardian.com |
| 2026-09-03 2026 | CrowdStrike Extends Its Endpoint Advantage to Secure the Software Supply Chain news | CrowdStrike is extending its endpoint security expertise to protect the software supply chain. This expansion aims to prevent attackers from compromising development pipelines and injecting malicious code into legitimate software. By leveraging its existing endpoint detection and response (EDR) capabilities, CrowdStrike will offer new tools and services to identify vulnerabilities and threats throughout the software development lifecycle. This initiative addresses the growing risks associated with increasingly complex and interconnected software development processes. |
| 2026-09-02 2026 | CrowdStrike Moves to Secure Software Supply Chains at the Endpoint news 3 min read | Library for real-time supply chain attack protection that blocks malicious open-source packages at the endpoint, safeguarding both human developers and AI coding agents on Windows, macOS, and Linux. It intercepts package manager transactions before embedded code executes, providing DevSecOps teams visibility into compromised package installations and enabling automated remediation workflows, even against threats like STARDUST CHOLLIMA and eCrime actor ALTERED SPIDER. → devops.com |
| 2026-09-02 2026 | The dark figure of supply chain detection beginner 7 min read | Library for application security detection engineering that highlights the "dark figure of crime" in supply chain attacks. It argues against relying solely on string-based or Indicator of Compromise (IOC) rules, which only catch previously identified threats. Instead, it advocates for behavioral analysis, mapping normal package behavior to identify deviations. This approach, exemplified by the detection of a malicious Keyv package on August 4th, 2026, allows for the identification of sophisticated attacks that evade signature-based methods by focusing on what a package *does* rather than what it *is*. → aikido.dev |
| 2026-09-01 2026 | Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure news 2 min read | Writeup of CVE-2026-82329, a critical authentication bypass in JFrog Artifactory allowing unauthenticated attackers network access to mint administrator tokens. This flaw, affecting specific Artifactory versions, resides in JFrog Access and enables attackers to forge credentials by abusing a 'phantom' join key. Threat actors have actively exploited this vulnerability, potentially leading to build pipeline tampering, lateral movement, and malicious code distribution downstream to customers. Organizations are advised to immediately patch internet-exposed systems and review logs for suspicious activity. → thehackernews.com |
| 2026-09-01 2026 | Hugging Face Security Incident: A New Class of Threat Is Here news 5 min read | Library for managing AI-enabled software supply chain security, building on lessons from the Hugging Face incident. It provides proactive dependency intelligence, real-time awareness of threats like malicious datasets and autonomous agent systems, and visibility and governance for AI artifacts alongside traditional components. Automated response capabilities, such as identifying safer upgrade paths, help teams quickly remediate identified risks and maintain pace with AI-accelerated development. → sonatype.com |
| 2026-09-01 2026 | Our response to the TanStack npm supply chain attack news | TanStack is responding to a supply chain attack targeting its npm packages. The attack involved a malicious actor gaining access to an npm account and publishing compromised versions of TanStack's libraries. This allowed the attacker to potentially inject malicious code into projects using these packages. TanStack has taken immediate action to mitigate the threat, including revoking compromised credentials and working to restore legitimate package versions. They are urging users to update to secure versions and implement security best practices. No payout amount was mentioned. |
| 2026-08-31 2026 | When AI Models Become the Supply Chain Attack advanced | Library for securing AI supply chains against threats like model poisoning and compromised updates. It recommends implementing a Model Gateway for prompt and response inspection, centralizing model access for logging and policy enforcement, and treating model updates like software releases with versioning and rollback plans. The library also advises monitoring prompt traffic for anomalies and controlling downstream actions from model outputs to prevent manipulation and real-world harm. |
| 2026-08-31 2026 | Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain intermediate 5 min read Secrets | Library that correlates developer identities with their personal public repositories, validating exposed secrets for exploitability. It addresses blind spots in traditional AppSec programs by identifying, validating, and driving fixes for secrets leaked from corporate code into personal accounts, a problem accelerated by AI development and impacting critical infrastructure access across Forbes AI 50 and other organizations. → wiz.io |
| 2026-08-30 2026 | Operation RepoGhost: Exposing a Russian-Linked Malware Campaign Hiding in GitHub’s Open-Source… news | Operation RepoGhost is a recently discovered malware campaign, active since November 2025, orchestrated by Russian-linked threat actors. Researchers have identified a network of fake GitHub repositories designed to impersonate legitimate IT software and projects. This tactic aims to lure unsuspecting developers into downloading malicious code disguised as legitimate open-source tools. The campaign leverages the trust and prevalence of GitHub to distribute malware, posing a significant threat to the open-source ecosystem. The specific payout amounts for bug bounties related to this campaign were not disclosed. → infosecwriteups.com |
| 2026-08-29 2026 | Securing Docker images intermediate 14 min read | Library for hardening Docker images, focusing on vulnerability management by shrinking the attack surface and implementing correct permissions. It addresses risks from base images, like CVE-2023-4911 in glibc, and advocates for minimal bases, multi-stage builds, and removing unused packages. The library also covers essential security practices such as running as a non-root user, utilizing read-only filesystems, dropping unnecessary Linux capabilities, and properly managing secrets to prevent them from being baked into image layers. → aikido.dev |
| 2026-08-28 2026 | Shai-Hulud hackers: two men charged over TeamPCP's global supply chain crime spree that hit OpenAI and thousands more news 2 min read | Writeup on TeamPCP's global supply chain crime spree, detailing the activities of the "Shai-Hulud hackers" who compromised open source software on platforms like GitHub and NPM. The group created malicious versions of legitimate packages to steal data and extort ransoms, impacting over 1000 organizations worldwide. Notable targets included vulnerability scanner Trivy, AI gateway LiteLLM, Mercor, and even OpenAI and the European Commission's cloud infrastructure. |
| 2026-08-28 2026 | Perth arrests reveal the supply chain blind spot in Australian cyber cover news 5 min read | Library addressing software supply chain vulnerabilities; this resource details an alleged TeamPCP attack orchestrated by two men in Perth, which compromised over 1,000 organizations globally, exfiltrated 300GB of data, and stole over 500,000 credentials. The incident highlights systemic risks to Australian insurance brokers, with potential policy gaps concerning third-party providers and widespread events. Investigations by the AFP, WAPF, and FBI led to charges including unauthorized data modification and dealing with proceeds of crime, underscoring the professionalization of cybercrime syndicates and the ASD's identification of IT supply chains as a structural vulnerability. |
| 2026-08-28 2026 | Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps intermediate 7 min read | Cheatsheet for Version Control DFIR, covering GitHub, GitLab, Bitbucket, and Azure DevOps, provides essential information for threat hunting and incident response in these systems. It details available log sources, noting retention limitations for events like Git operations and API requests, and offers a pre-incident readiness checklist focusing on enabling complete metadata and extending data retention. The resource also includes an attack detection and forensic matrix mapping VCS audit events to MITRE ATT&CK tactics, helping security teams translate adversary behaviors into actionable queries across different platforms for identifying compromised tokens, mass repository cloning, and log deletion. → wiz.io |
| 2026-08-28 2026 | Two Australian Men Charged in TeamPCP Supply Chain Attacks news 4 min read | Writeup detailing the arrests of two Australian men, Ruben Ian Thomson and Louis Michael Gaebler, for their alleged leadership in the TeamPCP cybercrime group. This group conducted extensive software supply chain attacks, compromising over 1,000 organizations by injecting credential-stealing malware into open-source software like Aqua Security's Trivy and LiteLLM. The attacks, which exposed over 500,000 credentials and exfiltrated significant data, also involved the Mini Shai-Hulud worm and targeted platforms including npm, PyPI, and GitHub, impacting vendors like TanStack, Mistral AI, UiPath, and OpenSearch. → govinfosecurity.com |
| 2026-08-27 2026 | Two alleged TeamPCP hackers arrested over global supply chain attacks news 2 min read | Arrests of alleged TeamPCP hackers in Australia detail a global supply chain attack campaign. These individuals are accused of planting malicious code into open-source software, impacting over a thousand organizations worldwide. Techniques employed included a self-spreading worm, Mini Shai-Hulud, used to steal credentials and authentication tokens, with impacts noted on platforms like GitHub and Red Hat. The operation reportedly resulted in the theft of over 500,000 credentials and 300 gigabytes of data, with remediation costs estimated in the hundreds of millions. → helpnetsecurity.com |
| 2026-08-27 2026 | Two Arrests One Supply-Chain Attack and a Lot of Stolen Credentials news 4 min read | Writeup detailing the arrest of two individuals for their alleged involvement in TeamPCP's global supply-chain attack campaign. This operation targeted open-source repositories, including PyPI and NPM, injecting malicious code into popular tools like Trivy, KICS, LiteLLM, and the Telnyx Python SDK. The campaign reportedly compromised over 1,000 organizations, leading to the theft of over 500,000 credentials and 300 gigabytes of data, using malware families such as CanisterWorm, SANDCLOCK, Mini Shai-Hulud, and Miasma. → securityaffairs.com |
| 2026-08-27 2026 | Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos news 2 min read | Writeup of the TeamPCP supply-chain attack campaign, detailing the arrests of two alleged members, Ruben Ian Thomson and Louis Michael Gaebler, by Australian authorities. The group compromised over 1,000 organizations through malicious code insertion into open-source software, including attacks against Trivy and libraries like TanStack, UiPath, and MistralAI. The campaign exposed hundreds of thousands of credentials and resulted in significant global cleanup costs, highlighting the ongoing threat of software supply-chain attacks. → cyberscoop.com |
| 2026-08-27 2026 | TeamPCP suspects arrested in Australia cybercrime case news | Australian authorities have arrested suspects linked to the cybercrime group TeamPCP. The arrests are part of a broader international operation targeting online fraud and malicious software. While the content doesn't specify a bounty payout, the arrests indicate a significant development in combating cyber threats. The investigation aims to dismantle the group's operations and prosecute those involved in their illegal activities. → cybernews.com |
| 2026-08-27 2026 | Australia arrests alleged TeamPCP hackers behind supply-chain attacks news 2 min read | Writeup on the TeamPCP supply-chain attacks, detailing their targeting of open-source software and developer platforms to steal credentials and source code. Investigations by Flare and Brian Krebs, alongside Australian Federal Police and FBI efforts, linked alleged TeamPCP members to their real-world identities, leading to arrests and charges for computer offenses and data modification. These attacks, impacting Trivy, LiteLLM, and SAP packages, potentially compromised over a thousand organizations globally. → bleepingcomputer.com |
| 2026-08-27 2026 | Two WA men charged after AFP-FBI-WAPF probe into alleged open-source supply-chain attack news 4 min read | Tool that aids in discovering supply-chain attack vectors; this catalog entry summarizes an investigation where the TeamPCP cybercrime syndicate allegedly inserted malicious code into open-source software, compromising over 1,000 organizations globally. The attack, enabled by compromising trusted components, led to the theft of hundreds of thousands of credentials and significant data exfiltration, resulting in arrests in Western Australia and highlighting the critical need for software supply-chain integrity. |
| 2026-08-27 2026 | Shai-Hulud was the best thing to happen to supply chain security news 9 min read | Library for securing npm packages, Shai-Hulud, highlights the impact of sophisticated attacks like S1ngularity, Shai-Hulud 2.0, and Miasma on adoption of Trusted Publishing. These campaigns, exploiting compromised CI pipelines and OIDC endpoint abuse, prompted maintainers to adopt the OIDC-based credential system, replacing long-lived tokens with short-lived ones to mitigate risks from token theft and malicious code execution. → aikido.dev |
| 2026-08-27 2026 | Software supply chain security requires decisions rather than defaults intermediate 5 min read | Library that backports security fixes, like those for xz-utils and lodash, to existing software versions. This approach avoids the risks associated with forced upgrades, such as introducing new vulnerabilities or breaking builds. The library emphasizes informed decision-making over default upgrade behaviors, allowing teams to maintain stable, trusted software baselines. It enables continuous management of software supply chains through proactive evaluation and controlled changes at the point of entry. → aikido.dev |
| 2026-08-26 2026 | How Utility Warehouse Secured Its Software Supply Chain Across CI/CD NPM and Developer Machines with StepSecurity intermediate 4 min read | Library for securing software supply chains, StepSecurity, enabled Utility Warehouse to gain visibility into CI/CD pipeline behavior, NPM dependency risk, and developer toolchains like Claude Code and GitHub Copilot. It proactively blocked a compromised NPM package introduced via refactoring and detected anomalous outbound network activity during CI/CD runs, preventing potential breaches. The solution integrates seamlessly without disrupting developer workflows, offering peace of mind against escalating software supply chain threats. → stepsecurity.io |
| 2026-08-26 2026 | Active Exploitation Alert: Critical Supply Chain Attack via 14 Trojanized npm Packages Drops RedC2 4.0 AI-Assisted Linux Backdoor news 4 min read | Library for detecting and analyzing a critical supply chain attack involving 14 trojanized npm packages that deploy the RedC2 4.0 AI-assisted Linux backdoor. The attack targets developer environments and Linux servers, exploiting the trust in open-source dependencies to execute malicious payloads and establish persistence. RedC2 4.0 offers interactive shell access, system discovery, credential theft, and AI-assisted C2 for advanced post-exploitation activities, including lateral movement and reconnaissance. The library aids in identifying malicious package imports and associated binary artifacts. → rescana.com |
| 2026-08-25 2026 | Why Self-Healing Is the Only Way to Secure at Frontier AI Speed advanced 3 min read | Library for a Self-Healing Software Supply Chain that operates at machine speed to automatically remediate vulnerabilities. This approach addresses the collapsed exploit window and broader attacker pool created by Frontier AI, ensuring speed and trust through build-safe fixes, ecosystem-wide reach, context-aware relevance, and verifiable governance. It integrates prevention, detection, prioritization, remediation, and evidence into a single system, unlike fragmented tools. → jfrog.com |
| 2026-08-25 2026 | Agent Immunization: A New Model for Building Trusted AI Agents advanced 4 min read AI | Library for agent immunization, a security model where trust is built into the AI agent's consumption, build, and shipping processes rather than relying on external perimeters. This approach addresses risks from poisoned or vulnerable AI assets pulled in by agents, which lack human developer judgment. Immunization ensures that nothing an agent consumes is trusted by default, enforcement occurs at the point of action, and every action is traceable to a specific, scoped identity, enabling scalable security for autonomous agents. → jfrog.com |
| 2026-08-24 2026 | 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 advanced 4 min read | Library of trojanized npm packages found delivering the AI-powered RedC2 4.0 Linux backdoor. Packages like `streak-metrics-math` and `kit-map-vim` contain functional code alongside the RedShell Linux beacon. RedC2 4.0, advertised as evasion-focused, offers surveillance, credential theft, and advanced post-exploitation via natural language commands through its Red Agent LLM component. → thehackernews.com |
| 2026-08-23 2026 | The State of Open Source Supply Chain Attacks beginner 9 min read | Analysis of 56 real-world software supply chain attacks from August 2025 to August 2026 reveals a significant increase in frequency and blast radius. These malicious compromises, targeting trusted packages and CI/CD pipelines across npm, PyPI, RubyGems, Composer, and crates.io, include widespread worms like Shai-Hulud and Miasma, and targeted campaigns like Team PCP that stole cloud and signing keys. Vulnerability disclosures and new malicious packages are excluded, focusing instead on attacks that leverage existing trust to compromise popular AI infrastructure packages, GitHub Actions, and widely downloaded components. → stepsecurity.io |
| 2026-08-23 2026 | GitHub, autoscaling, and the component substitution fallacy intermediate 4 min read | Analysis of the GitHub outage reveals a component substitution fallacy, where focus on specific defects like a misconfigured autoscaling policy for Istio sidecars overshadows crucial system interactions. The incident highlights how a bespoke autoscaling policy, based on service load but not sidecar limits, contributed to saturation. It emphasizes that reliability improvements require examining system interdependencies, including traffic patterns, retry logic, and HAProxy saturation, rather than solely fixing individual component failures. |
| 2026-08-22 2026 | Rust Supply Chain Attack Targets Solana-Related Build Pipelines news 2 min read | Library detailing the Rust supply chain attack that targeted Solana-related build pipelines by injecting malicious code through tainted dependencies like arrayref@0.3.10, internment@0.8.7, and append-only-vec@0.1.9. The attack exploited Cargo build scripts to download and execute remote payloads, shifting risk to developer workstations and CI environments. Security teams were urged to audit Cargo.lock files and CI runners due to the potential for widespread compromise across the Rust ecosystem and crypto infrastructure. |
| 2026-08-22 2026 | Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory news 14 min read AI | Library for propagating user identity from AI agents to downstream tools like JFrog Artifactory, leveraging Amazon Bedrock AgentCore Gateway and its On-Behalf-Of (OBO) token exchange mechanism. This approach ensures that agent actions are audited under the correct user, enforcing least privilege and improving containment by avoiding shared long-lived credentials when interacting with systems like JFrog's MCP server. → jfrog.com |
| 2026-08-22 2026 | Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain intermediate 5 min read | Library for securing the software development lifecycle supply chain, addressing threats targeting developer tools, CI/CD pipelines, and cloud environments. It details attacks like the XZ Utils vulnerability (CVE-2024-3094), the Axios supply chain attack, and the Shai-Hulud npm worm, emphasizing the need for continuous visibility across endpoints, pipelines, and cloud workloads. The library supports techniques such as implementing a pipeline bill of materials (PBOM), disabling lifecycle install scripts, enforcing package cooldown periods, and transitioning to brief OIDC authentication with end-to-end cryptographic provenance to defend against autonomous malware and achieve supply chain resilience. → unit42.paloaltonetworks.com |
| 2026-08-21 2026 | Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain beginner 5 min read | Library for detecting supply chain threats within the Software Development Lifecycle (SDLC), focusing on attacks targeting developer tools and CI/CD pipelines. It highlights vulnerabilities exploited by attacks like the XZ Utils backdoor (CVE-2024-3094), the Axios supply chain compromise, and the Shai-Hulud npm worm, emphasizing the need for continuous visibility across developer endpoints, pipelines, and cloud workloads beyond static code scanning and standard SBOMs. → unit42.paloaltonetworks.com |
| 2026-08-21 2026 | Hackers Target Popular arrayref Rust Crate in Supply-Chain Attack news 4 min read | Library compromising the popular `arrayref` Rust crate and related packages (`append-only-vec`, `internment`) via a supply-chain attack using a typosquatted dependency (`proc-macro1`) to execute an information-stealing payload at compile time. The attack involved impersonating a developer, yanking legitimate versions to lure developers to malicious releases, and exfiltrating credentials and system information. Overlap in infrastructure suggests links to North Korean-linked threat actors, specifically Sapphire Sleet and UNC1069. → devops.com |
| 2026-08-21 2026 | Rust Supply-Chain Attack Compromises Popular arrayref Crate news 1 min read | Writeup of Rust supply-chain attack involving the arrayref crate and malicious packages like proc-macro1, proc-macro-en, aovine, arone, aronenao, and tinymember on crates.io. The compromised arrayref version 0.3.10 was briefly available, with legitimate versions yanked to direct users to the malicious one. The Rust Security Response Team suspects compromised credentials rather than direct author involvement, crediting Nextron Systems GmbH for discovery. |
| Browse all 753 Supply Chain Security resources → | ||
Frequently Asked Questions
- What is a software supply chain attack?
- A supply chain attack targets the components, tools, or processes used to build software rather than the application itself. This includes compromising open-source packages, injecting malicious code into build pipelines, hijacking maintainer accounts, or distributing trojanized development tools — allowing attackers to affect thousands of downstream users simultaneously.
- What is dependency confusion?
- Dependency confusion (also called namespace confusion) exploits how package managers resolve dependencies. An attacker publishes a malicious package to a public registry with the same name as a private internal package. If the build system checks the public registry first or prefers higher version numbers, it installs the attacker's package instead of the legitimate internal one.
- How do you defend against supply chain attacks?
- Key defenses include maintaining a Software Bill of Materials (SBOM), using lock files and dependency pinning, enabling automated dependency scanning (Dependabot, Snyk, Socket), verifying package signatures and provenance, adopting the SLSA framework for build integrity, using private registries with allow-lists, and regularly auditing your dependency tree for known vulnerabilities.
Weekly AppSec Digest
Get new resources delivered every Monday.