The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-05-06 2026 | Hackers compromise Daemon Tools in global supply-chain attack researchers say news 2 min read | Library installers for Daemon Tools were compromised in a global supply-chain attack, impacting users in over 100 countries. Attackers embedded backdoors, including Quic RAT, into versions 12.5.0.2421 through 12.5.0.2434 of the free Daemon Tools Lite, observed since early April. The campaign appears targeted, with initial data collectors deployed broadly and more advanced payloads reserved for specific organizations. Disc Soft has addressed the issue, recommending users update to the latest version. |
| 2026-05-06 2026 | Daemon Tools Hit by Suspected Chinese Supply Chain Attack Kaspersky Says news | Kaspersky reports that Daemon Tools, a popular file management software, has been targeted in a suspected Chinese supply chain attack. The attackers reportedly injected malicious code into the software's update mechanism, allowing them to gain access to user systems. |
| 2026-05-06 2026 | Sophisticated Quasar Linux RAT Targets Software Developers news 2 min read | Analysis of Quasar Linux (QLNX), a sophisticated backdoor targeting software developers. QLNX employs a modular architecture with rootkit capabilities, detection evasion, and multiple persistence methods including crontab, desktop entries, init scripts, service files, and shell lines. It focuses on stealing developer credentials for AWS, Kubernetes, Docker Hub, Git, NPM, and PyPI, enabling attackers to compromise publishing pipelines and pivot to cloud environments. The RAT uses a PAM backdoor and an eBPF rootkit to conceal its presence at both userspace and kernel levels, while supporting 58 commands for comprehensive system control and information harvesting. → securityweek.com |
| 2026-05-06 2026 | DAEMON TOOLS supply chain attack ongoing since April thousands affected news 2 min read | Library containing information on the DAEMON Tools supply chain attack, which began in April 2026. Attackers compromised legitimate installers and signed binaries with valid certificates, embedding backdoors into components like DTHelper.exe and DiscSoftBusServiceLite.exe. The campaign delivered information-stealing payloads, and in some cases, advanced implants like QUIC RAT, targeting government, manufacturing, scientific research, and retail sectors across over 100 countries. Kaspersky detects malicious activity including suspicious PowerShell downloads and code injection. |
| 2026-05-06 2026 | Android Apps Get Public Verification System to Stop Supply Chain Attacks beginner 2 min read | Library for public verification of Android apps, expanding Google's Binary Transparency initiative to combat supply chain attacks. This system creates a public, cryptographically verifiable ledger of software metadata, ensuring apps on devices match intended builds, akin to Certificate Transparency for SSL/TLS. The effort aims to prevent malicious code injection through compromised update channels, as seen in recent DAEMON Tools backdoor attacks, by providing a "certificate of intent" beyond just digital signatures. Verification tooling will be available for users and researchers to confirm software authenticity. → thehackernews.com |
| 2026-05-06 2026 | Government Scientific Entities Hit via Daemon Tools Supply Chain Attack news 2 min read | Library containing injected code in Daemon Tools versions 12.5.0.2421 through 12.5.0.2434 has been identified as part of a supply chain attack affecting government, scientific, and other organizations. The compromised binaries, including DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe, activate a backdoor that fetches and executes payloads, with targeted deployments of information collectors and the QUIC RAT observed. → securityweek.com |
| 2026-05-06 2026 | Extremely targeted supply chain attack hits DAEMON Tools news 13 min read | Library for detecting and analyzing supply chain attacks, exemplified by the compromise of DAEMON Tools installers, which included a backdoor and a second-stage QUIC RAT payload. This incident, similar to past attacks on Notepad++ and CCleaner, highlights the targeting of high-value systems by Chinese-speaking threat actors for espionage. The library helps in identifying system data collection, remote server uploads, and targeted second-stage payload deployment. |
| 2026-05-06 2026 | North Korean hackers trojanize gaming platform to spy on ethnic Koreans in China news 2 min read | Analysis of ScarCruft's supply chain attack targeting ethnic Koreans in China. North Korean threat actors trojanized the sqgame gaming platform, distributing backdoored Windows and Android software. The Windows variant utilized a patched mono.dll to deliver the RokRAT backdoor and BirdCall implant, while Android versions repackaged games with malicious code to exfiltrate data, targeting HWP files specifically. C2 communication leveraged Zoho WorkDrive accounts. → helpnetsecurity.com |
| 2026-05-06 2026 | Supply-Chain Attacks in an Era of Automation and Implicit Trust beginner 7 min read | Library detailing software supply-chain attacks in 2026, focusing on how attackers abuse trusted automation and identity. It examines incidents like the Axios compromise and Trivy campaign, where compromised package maintainers and CI/CD automation led to widespread malicious dependencies and credential exfiltration. The resource also highlights the exploitation of legacy management systems, such as Quest KACE using CVE-2025-32975, emphasizing how attackers leverage inherent trust in these tools to gain entry. |
| 2026-05-05 2026 | Bootstrap script exposes PyPI to domain takeover attacks news 8 min read Python | Library exposing PyPI packages to domain takeover vulnerabilities, discovered in legacy bootstrap scripts for tools like zc.buildout and older Python packaging utilities. These scripts, when executed, attempt to download and install the `distribute` package from `python-distribute[.]org`, a domain now available for sale. This vulnerability affects numerous popular packages, including `tornado` and `slapos.core`, potentially allowing attackers to compromise systems by controlling the abandoned domain and serving malicious code. → reversinglabs.com |
| 2026-05-05 2026 | Supply-chain attacks take aim at your AI coding agents news 6 min read AI | Library for defending against AI coding agent supply-chain attacks. This library addresses the threat of malicious packages, like those used by North Korea's Famous Chollima APT in the PromptMink campaign, which leverage LLM Optimization and knowledge injection to trick autonomous coding agents into incorporating compromised dependencies. It also targets "slopsquatting," where agents hallucinate package names, making them vulnerable to similarly named malicious replacements. → csoonline.com |
| 2026-05-05 2026 | Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack news 2 min read | Writeup on the Daemon Tools supply-chain attack, detailing a monthlong compromise where malicious updates signed with official certificates infected versions 12.5.0.2421 through 12.5.0.2434. The malware, discovered by Kaspersky, exfiltrates system information and delivers follow-on payloads to select targets. This incident mirrors previous supply-chain attacks like CCleaner (2017), SolarWinds (2020), and 3CX (2023), highlighting the difficulty in defending against sophisticated, officially distributed compromises. → arstechnica.com |
| 2026-05-05 2026 | DAEMON Tools trojanized in supply-chain attack to deploy backdoor news 2 min read | Writeup detailing a supply-chain attack that trojanized DAEMON Tools installers, versions 12.5.0.2421 through 12.5.0.2434, delivering a backdoor to thousands of systems globally since April 8. The attack compromised DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe, leading to initial infections and targeted deployments of a lightweight backdoor and, in one instance, the QUIC RAT, to high-value targets in retail, scientific, government, and manufacturing sectors across Russia, Belarus, and Thailand. → bleepingcomputer.com |
| 2026-05-05 2026 | Quasar Linux (QLNX) A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit PAM Backdoor Credential Harvesting Capabilities intermediate 20 min read | Library for analyzing Quasar Linux (QLNX), a sophisticated Linux RAT with low detection rates, featuring a rootkit, PAM backdoor, and credential harvesting capabilities. QLNX targets developers and DevOps credentials in the software supply chain, extracting secrets from files like .npmrc, .pypirc, and .aws/credentials. It uses dynamic compilation of PAM modules and LD_PRELOAD rootkits, and employs P2P mesh networking for resilience, making eradication difficult. → trendmicro.com |
| 2026-05-05 2026 | A rigged game: ScarCruft compromises gaming platform in a supply-chain attack news 10 min read | Library by ESET researchers detailing a ScarCruft supply-chain attack targeting a gaming platform used by ethnic Koreans in China. The Windows client was compromised via a trojanized update containing the RokRAT backdoor, which deployed the BirdCall backdoor. Android games on the platform were also trojanized with an Android version of BirdCall, a new tool for ScarCruft, capable of espionage including data exfiltration, screenshots, and audio recording. |
| 2026-05-05 2026 | DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware news 5 min read | Writeup on the DAEMON Tools supply chain attack, where official Windows installers (versions 12.5.0.2421-12.5.0.2434) were trojanized with malware. Compromised binaries like DTHelper.exe launched an implant that fetched shell commands from "env-check.daemontools[.]cc." Payloads included envchk.exe for system info gathering and cdg.exe with cdg.tmp, leading to a backdoor and QUIC RAT. The attack impacted thousands globally, with targeted delivery to a dozen hosts across various sectors. AVB Disc Soft released version 12.6.0.2445 to fix the issue. → thehackernews.com |
| 2026-05-05 2026 | Kaspersky identifies ongoing supply chain attack on official Daemon Tools website distributing backdoor malware news 4 min read | Analysis of a supply chain attack targeting Daemon Tools, which distributed backdoor malware via compromised installers disguised with valid digital certificates. The attack, affecting versions 12.5.0.2421 and later, granted threat actors arbitrary command execution and remote control capabilities by leveraging the software's elevated system privileges. Some targeted organizations also saw manual deployment of additional payloads like shellcode injectors and unknown RATs, with Chinese-language artifacts observed. → kaspersky.com |
| 2026-05-05 2026 | Supply chain attack via DAEMON Tools news 2 min read | Writeup detailing a supply chain attack via DAEMON Tools, where attackers injected malicious code into installers for versions 12.5.0.2421 through 12.5.0.2434, specifically compromising DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. This compromise led to the deployment of information gatherers, a backdoor, and the QUIC RAT implant, targeting thousands of users globally since April 8, 2026. → kaspersky.com |
| 2026-05-05 2026 | 8.3M Downloads Compromised: Lightning & Intercom-Client Infected in Latest Shai-Hulud Attack news 4 min read | Library update: The Python package `Lightning` (versions 2.6.2, 2.6.3) and the NPM package `intercom-client` (version 7.0.4) have been compromised by a Shai-Hulud supply chain attack, stealing credentials and API keys. Affected users should rotate keys, enable 2FA, and revert `Lightning` to version 2.6.1 or lower. The malware, a Node/Bun tool, collects secrets from the environment and exfiltrates them to an obfuscated host, while also using compromised npm tokens to download, patch, and republish trojanized packages. Over 1,800 repositories with stolen developer credentials were identified on GitHub. → ox.security |
| 2026-05-05 2026 | Trellix Reveals Unauthorized Access to Source Code news 2 min read | Writeup of Trellix source code breach, highlighting how unauthorized access to security vendor code provides attackers with a roadmap to controls and detections. This incident, linked to a pattern of targeting security vendors and software supply chains, underscores the risks associated with CI/CD gaps and overtrusted build workflows, echoing recent compromises like the Trivy software supply chain attack. → infosecurity-magazine.com |
| 2026-05-04 2026 | Local Guardrails for Secrets Security in the Age of AI Coding Assistants intermediate 9 min read AI Secrets | Library for local secrets security, ggshield, by GitGuardian, helps protect developer workstations from credential theft in the age of AI coding assistants. This tool scans project workspaces, dotfiles, build output, and agent folders for exposed secrets, addressing the shift in attack surface towards developer environments. It aims to provide earlier checkpoints than traditional supply chain controls, catching issues while developers are still editing files rather than after they reach remote repositories. → blog.gitguardian.com |
| 2026-05-04 2026 | Tenable finds GitHub workflow flaw in Microsoft repo news | Tenable researchers discovered a critical vulnerability in a GitHub Actions workflow within a Microsoft repository. This flaw, if exploited, could have allowed for the potential compromise of code and sensitive information. Microsoft has since addressed the vulnerability, and Tenable has published details about the issue. |
| 2026-05-02 2026 | Shai-Hulud Hits SAP: Stolen Credentials Found in 1200 GitHub Repos news 5 min read Secrets | Tool: Shai-Hulud worm variant, a Bun-based stealer, targets SAP npm packages, exfiltrating credentials, tokens, and cloud configurations. It uploads stolen data encrypted to over 1,200 public GitHub repositories, identifiable by the string "A Mini Shai-Hulud has Appeared." The malware attempts to steal secrets from developer machines, GitHub Actions environments, and cloud platforms like AWS, Azure, and GCP. Over 2.2 million monthly downloads are affected, with immediate actions including key rotation and upgrading affected packages. → ox.security |
| 2026-05-01 2026 | 1800 Hit in Mini Shai-Hulud Attack on SAP Lightning Intercom news 2 min read | Writeup of the Mini Shai-Hulud supply chain attack, impacting over 1,800 developers across PyPi, NPM, and PHP ecosystems. TeamPCP's campaign injected malicious versions of SAP NPM packages, the Lightning PyPi package, and the intercom-client NPM package with information-stealing malware. The payload, disguised with the description "A Mini Shai-Hulud has Appeared," exfiltrates credentials, keys, and tokens, targeting Kubernetes environments and HashiCorp Vault secrets, utilizing GitHub commits for C&C commands. → securityweek.com |
| 2026-05-01 2026 | SAP Faces Twin Headwinds: A Supply Chain Attack and a Bruised Share Price news 3 min read | Analysis of a sophisticated supply chain attack on SAP, where hackers compromised npm packages like the Cloud Application Programming Model and Cloud MTA Build Tool, injecting malicious scripts to steal credentials and security keys. This incident, coupled with a cautious market outlook, has led to a significant drop in SAP's share price, despite strong cloud business performance. The attack highlights the pervasive risk of open-source software infiltration, impacting investor confidence. |
| 2026-05-01 2026 | Poisoning the well: AI supply chain attacks on Hugging Face and OpenClaw news 16 min read AI | Library of malicious AI skills targeting Hugging Face and ClawHub for malware delivery, including trojans, cryptominers, and AMOS stealer, leveraging indirect prompt injection and social engineering to execute encoded commands and hidden dependencies, expanding attack chains beyond initial user compromise. |
| 2026-05-01 2026 | Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft news 2 min read | Analysis of a software supply chain attack campaign utilizing sleeper Ruby gems, such as `knot-date-utils-rb` and `knot-simple-formatter`, and Go modules, including `github[.]com/BufferZoneCorp/log-core` and `github[.]com/BufferZoneCorp/go-envconfig`. These malicious packages, masquerading as legitimate libraries like `activesupport-logger` and `go-retryablehttp`, aim to steal credentials, tamper with GitHub Actions, and establish SSH persistence, exfiltrating data to Webhook[.]site. → thehackernews.com |
| 2026-05-01 2026 | Kaspersky reveals a 37% increase in malicious packages compromising software supply chains news 3 min read | Survey of a 37% increase in malicious packages compromising software supply chains, detailing incidents involving CPU-Z, HWMonitor, Axios (versions 1.14.1 and 0.30.4), and Notepad++, with Kaspersky GReAT analysis linking some attacks to Bluenoroff's GhostCall and GhostHire campaigns. The report emphasizes the growing threat to businesses and recommends solutions like Kaspersky Open Source Software Threats Data Feed and XDR/MXDR for monitoring and threat detection. |
| 2026-05-01 2026 | The never-ending supply chain attacks worm into SAP npm packages other dev tools news 3 min read | Survey of supply chain attacks targeting SAP npm packages, highlighting vulnerabilities within development tools. The article touches upon AI agents as potential attack vectors and the broader challenges in securing development environments and managing hardware lead times. It also mentions incidents like the "Ralph Wiggum" loop impacting Claude and the economic pressures on open-source registries to implement basic security measures. → theregister.com |
| 2026-04-30 2026 | SAP npm Supply Chain Attack Targets Developer Credentials news 3 min read | Writeup of an SAP npm supply chain attack, TeamPCP group leveraging compromised @cap-js/sqlite, @cap-js/postgres, @cap-js/db-service, and mbt packages to steal developer credentials and secrets including GitHub, npm, AWS, Azure, GCP, and Kubernetes tokens via npm's preinstall script functionality and Bun JavaScript runtime. → esecurityplanet.com |
| 2026-04-30 2026 | TeamPCP Hits SAP Packages With 'Mini Shai-Hulud' Attack news | TeamPCP has developed a new attack targeting SAP applications called "Mini Shai-Hulud." This sophisticated threat leverages multiple vulnerabilities to bypass security controls and achieve remote code execution. The attack appears to be highly effective, capable of compromising SAP NetWeaver Application Server Java components. Further details on the exploit's mechanics and impact are available via the provided link. → darkreading.com |
| 2026-04-30 2026 | SAP NPM Packages Targeted in Supply Chain Attack news 2 min read | Library of compromised SAP NPM packages, including npm mbt 1.2.48, npm @cap-js/db-service 2.10.1, npm @cap-js/postgres 2.2.2, and npm @cap-js/sqlite 2.2.2, were found to contain malicious code as part of the Mini Shai-Hulud supply chain attack. The injected preinstall script acted as a bootstrapper, fetching and executing a Bun binary that stole local credentials, GitHub/NPM tokens, and cloud secrets. The malware exfiltrated data to GitHub repositories with a specific description and included a propagation mechanism, targeting SAP CAP and Business Technology Platform workflows. The incident is attributed to TeamPCP, leveraging a shared RSA public key for encryption. → securityweek.com |
| 2026-04-30 2026 | Google's fix for critical Gemini CLI bug might break your CI/CD pipelines news 3 min read RCE | Writeup on a critical Gemini CLI bug fix from Google that may negatively impact CI/CD pipelines. The article discusses the implications of securing untrusted agentic development layers and the challenges of AI agents consuming significant API tokens. → theregister.com |
| 2026-04-30 2026 | Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer news 5 min read | Library detailing "Mini Shai-Hulud," a Bun-based secret stealer targeting SAP npm packages like `@cap-js/sqlite`, `@cap-js/postgres`, `@cap-js/db-service`, and `mbt`. The malware uses a `preinstall` script to download and execute a credential stealer, harvesting GitHub tokens, npm tokens, cloud secrets from AWS, Azure, GCP, and Kubernetes, and exfiltrating encrypted results via public GitHub repositories. It propagates by injecting malicious code into other packages and commits. → aikido.dev |
| 2026-04-30 2026 | PyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal Credentials news 5 min read | Library compromised in a PyPI supply chain attack, pushing malicious versions 2.6.2 and 2.6.3 of PyTorch Lightning, leading to credential theft. The attack leveraged a hidden downloader and obfuscated JavaScript payload, executed automatically upon import, to harvest GitHub tokens, cloud credentials, and other secrets, with propagation techniques extending to npm packages. This incident is linked to the broader Mini Shai-Hulud campaign and threat actor TeamPCP. → thehackernews.com |
| 2026-04-30 2026 | Critical Gemini CLI Flaw Enabled Host Code Execution Supply Chain Attacks news 1 min read RCE | Writeup of the Gemini CLI vulnerability, CVE-XXXX-XXXX, detailing how a flaw in the AI agent's handling of workspace configurations allowed for host code execution. Researchers at Novee Security discovered that Gemini CLI would load agent configurations without sandboxing or review, enabling attackers to inject malicious commands. This could lead to supply chain attacks within CI/CD pipelines, allowing unauthorized access to secrets and credentials, as demonstrated by a similar hijacking vulnerability affecting other AI agents like Claude and GitHub Copilot. → securityweek.com |
| 2026-04-30 2026 | Kaspersky Reports 37% Surge in Malicious Packages Targeting Global Software Supply Chains news 3 min read | Survey of supply chain attacks, detailing a 37% surge in malicious packages targeting open-source projects by late 2025. Kaspersky GReAT research highlights compromised software like CPU-Z, HWMonitor, Axios (v1.14.1, 0.30.4), and Notepad++, noting shared tactics with Bluenoroff campaigns. The analysis emphasizes the need for monitoring open-source components, continuous infrastructure oversight via solutions like Kaspersky Next, and proactive incident response planning to mitigate these escalating threats. |
| 2026-04-29 2026 | Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware news 3 min read Secrets | Library for detecting the "Mini Shai Hulud" supply chain attack, which compromises SAP npm packages like `@cap-js/sqlite` and `@cap-js/postgres` using malicious preinstall scripts. The malware harvests developer and CI/CD secrets from GitHub, npm, and cloud providers (AWS, Azure, GCP) via multi-stage payloads, exfiltrating data through attacker-controlled GitHub repositories using the GraphQL API. It also attempts to poison GitHub repositories and steal browser credentials, with attribution to TeamPCP based on shared RSA keys and code similarities. → wiz.io |
| 2026-04-29 2026 | Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets news 1 min read AI | Library from ReversingLabs detailing the PromptMink campaign, involving the malicious npm dependency `@validate-sdk/v2`. This campaign, attributed to North Korean actor Famous Chollima, utilized AI-assisted commits (reportedly with Anthropic's Claude Opus) and a layered package structure to exfiltrate secrets, steal crypto wallet funds, and establish persistent remote access. The malware evolved from JavaScript to compiled binaries and Rust payloads, targeting both Linux and Windows, and demonstrated an increasing sophistication in leveraging AI development tools for supply chain attacks. → infosecurity-magazine.com |
| 2026-04-29 2026 | GitHub fixes RCE flaw that gave access to millions of private repos news 2 min read RCE | Writeup on CVE-2026-3854, a critical remote code execution vulnerability in GitHub.com and GitHub Enterprise Server, allowing attackers with push access to gain read/write privileges to private repositories. The flaw stems from insufficient sanitization of user-supplied options during git push operations, enabling arbitrary code execution by chaining injected values. While GitHub.com was patched rapidly, many GitHub Enterprise Server instances remain vulnerable and require immediate upgrades. Wiz researchers discovered the vulnerability, which could have exposed millions of private repositories. → bleepingcomputer.com |
| 2026-04-29 2026 | Checkmarx Confirms Data Stolen in Supply Chain Attack news 2 min read | Analysis of a supply chain attack targeting Checkmarx's KICS open source project, involving the Trivy supply chain compromise and attributed to TeamPCP. Attackers leveraged hijacked GitHub Action version tags, poisoned OpenVSX plugins, and two GitHub Actions workflows. Subsequently, Lapsus$ also joined in, claiming theft of source code, employee databases, API keys, and credentials, further poisoning a DockerHub KICS image, a GitHub action, and VS Code/Developer Assist extensions, impacting the Bitwarden CLI. → securityweek.com |
| 2026-04-29 2026 | Critical GitHub RCE bug exposed millions of repositories news 2 min read RCE | Writeup of CVE-2026-3854, a critical command injection vulnerability in GitHub's Git push processing. This flaw, discovered by Wiz researchers and potentially aided by IDA MCP AI tooling, allowed authenticated users to execute arbitrary commands and achieve remote code execution by crafting malicious input within Git push requests. The vulnerability affected GitHub.com and GitHub Enterprise Server, granting access to millions of repositories and full server compromise in self-hosted environments. Patches have been released for affected GitHub Enterprise Server versions. → csoonline.com |
| 2026-04-29 2026 | Critical GitHub Vulnerability Exposed Millions of Repositories news 2 min read RCE | Writeup detailing CVE-2026-3854, a critical remote code execution vulnerability in GitHub's internal Git infrastructure. Exploitable via a single git push command by any authenticated user, this flaw impacted GitHub Enterprise Server and GitHub.com, potentially allowing arbitrary command execution on backend servers and access to millions of repositories and internal secrets. Wiz researchers discovered the vulnerability, noting easy exploitation and significant impact on both platforms, though GitHub has since deployed patches. → securityweek.com |
| 2026-04-29 2026 | More fake extensions linked to GlassWorm found in Open VSX code marketplace news 4 min read | Writeup on GlassWorm malware campaign, detailing the discovery of 73 new fake extensions impersonating trusted tools on the Open VSX code marketplace. These extensions, designed to evade detection with benign initial code and bundled native binaries, act as loaders to download the GlassWorm malware. Researchers highlight the systemic security gap in IDE extension management compared to software packages, lacking integrity verification and leading to credential theft. Recommendations include treating extensions as high-risk dependencies, disabling auto-updates, using SCA tools that cover extensions, and implementing strict approval processes. → csoonline.com |
| 2026-04-28 2026 | Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push news 3 min read RCE | Writeup of CVE-2026-3854, a critical command injection vulnerability in GitHub.com and GitHub Enterprise Server, allowing authenticated users to achieve remote code execution via a single "git push" command. The flaw, discovered by Wiz, stems from unsanitized push option values within internal service headers, enabling attackers to override environment settings, bypass sandboxing, and execute arbitrary commands as the git user, potentially leading to cross-tenant repository exposure. Patches have been released for affected GitHub Enterprise Server versions. → thehackernews.com |
| 2026-04-28 2026 | Securing the git push pipeline: Responding to a critical remote code execution vulnerability intermediate 4 min read RCE | Writeup on CVE-2026-3854, a critical remote code execution vulnerability in GitHub's git push pipeline. The vulnerability allowed arbitrary command execution on the server by leveraging unsanitized user-supplied push options to inject metadata fields and bypass sandboxing. GitHub patched github.com within hours and released patches for GitHub Enterprise Server, recommending immediate upgrades. The writeup details the exploitation technique, response, and defense-in-depth measures, including the removal of an unnecessary code path. → github.blog |
| 2026-04-28 2026 | Critical Cursor bug could turn routine Git into RCE news 3 min read RCE | Writeup on CVE-2026-26268, a critical vulnerability in the Cursor IDE that allows arbitrary code execution through routine Git operations. Researchers at Novee Security discovered that a malicious repository, containing specially crafted Git hooks within a bare repository, can trigger the IDE's AI agent to execute attacker-controlled code upon operations like `git checkout`. This exploit bypasses traditional security by leveraging standard Git features autonomously executed by the AI. The issue is patched in Cursor version 2.5. → csoonline.com |
| 2026-04-28 2026 | Dozens of Open VSX Extension Clones Linked to GlassWorm Malware news 2 min read | Analysis of 73 cloned extensions on the Open VSX marketplace reveals a sophisticated GlassWorm malware campaign. These extensions, masquerading as legitimate tools, employ social engineering and Unicode obfuscation to evade detection, stealing GitHub, Git, NPM credentials, and cryptocurrency. The malware's delivery mechanism involves bundled native binaries and remote payload retrieval, a tactic designed to bypass static analysis and compromise users through normal extension updates. → securityweek.com |
| 2026-04-27 2026 | Ongoing supply-chain attack 'explicitly targeting' security dev tools news 4 min read | Library of security and developer tools affected by a sophisticated supply-chain attack. Threat actors, including Lapsus$, have targeted tools like Trivy, KICS, and Checkmarx's GitHub repositories, injecting credential-stealing malware and poisoning Docker images. This campaign also compromised Bitwarden's CLI and exposed sensitive data, including source code and API keys, demonstrating a direct assault on the security ecosystem. → theregister.com |
| 2026-04-27 2026 | Open source package with 1 million monthly downloads stole user credentials news 1 min read | Library **element-data** version 0.23.3 was compromised, stealing user credentials, cloud provider keys, API tokens, and SSH keys. A threat actor exploited a vulnerability in the developers' GitHub actions workflow to gain access to signing keys and sensitive information, allowing them to publish a malicious package to the Python Package Index and Docker image accounts. Users who installed the compromised version or ran the affected Docker image should assume their credentials may have been exposed. → arstechnica.com |