The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-04-27 2026 | Bitwarden CLI Impersonation Attack Steals Cloud Credentials and Spreads Across npm Supply Chains news 2 min read | Writeup of the `@bitwarden/cli` npm supply chain attack by TeamPCP, detailing its worm-like propagation across AWS, Azure, and GCP credentials by harvesting secrets from local filesystems, environment variables, and cloud secret managers. The malicious package, version 2026.4.0, impersonated the legitimate Bitwarden CLI and spread to thousands of users before detection, impacting developer workstations and CI/CD pipelines. → paloaltonetworks.com |
| 2026-04-27 2026 | Claude Code is leaking API keys into public package registries news 5 min read Secrets | Writeup on Claude Code's API key leak, where the AI coding assistant caches approved terminal commands, including credentials passed via environment variables, into a hidden `.claude/settings.local.json` file. This file, if not excluded by `.npmignore` or `package.json` configurations, can be inadvertently published to public registries alongside source code, exposing sensitive data to the software supply chain. Existing secret scanning tools often miss these exposures as they reside within AI tool-specific settings, requiring developers to manually update ignore files and package managers to preview artifacts before publishing. |
| 2026-04-26 2026 | prompt-security/clawsec: A complete security skill suite for OpenClaw's and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite. beginner 6 min read AI | Library for comprehensive AI agent security, protecting against prompt injection and drift. It offers unified monitoring, integrity verification, and threat intelligence for platforms like OpenClaw, NanoClaw, Hermes, and Picoclaw. Key features include skill installer, file integrity protection with drift detection, live security advisories from NVD CVEs, automated audits for vulnerabilities, and SHA256 checksum verification for artifacts. The suite also supports advisory monitoring and hook-based protection flows, with Python utilities for local skill development and validation. |
| 2026-04-24 2026 | The npm Threat Landscape: Attack Surface and Mitigations beginner 13 min read | Library detailing the evolving npm threat landscape, focusing on the Shai-Hulud worm and subsequent systematic supply chain compromises. It analyzes significant incidents like the Axios and Bitwarden CLI compromises, highlighting adversarial tactics such as wormable propagation via token theft, CI/CD pipeline persistence, and multi-stage payloads. The library also covers remediation playbooks for credential rotation and dependency purging, and details the technical specifics of obfuscation and execution mechanisms used by malware targeting npm users and distribution channels like Docker Hub and GitHub Actions. → unit42.paloaltonetworks.com |
| 2026-04-24 2026 | Flurry of Supply-Chain Software Library Attacks news 5 min read | Library security overview detailing recent supply-chain attacks targeting open-source repositories like npm and PyPI. Attackers compromise popular packages, such as LiteLLM, Axios, Xinference, Namastex.ai, Checkmarx KICS, and Bitwarden CLI, injecting malware to steal developer credentials, secrets, and tokens. These poisoned packages, distributed via automated CI pipelines, can spread rapidly through software dependencies, highlighting the fragility of current development practices. → bankinfosecurity.com |
| 2026-04-24 2026 | Flurry of Supply-Chain Software Library Attacks news 5 min read | Library attacks targeting npm and PyPI repositories have surged, compromising open-source projects like LiteLLM, Axios, Xinference, Namastex.ai, Checkmarx KICS, and Bitwarden CLI. Attackers inject data-stealing malware and worms, such as Shai-Hulud, into popular packages, which are then automatically merged into downstream projects via CI/CD pipelines. These compromises aim to steal developer credentials, cloud secrets, and spread laterally to other repositories, highlighting the fragility of software supply chains. → govinfosecurity.com |
| 2026-04-24 2026 | Bitwarden CLI Compromised in Shai-Hulud Supply Chain Attack; 334 Developers Exposed news 3 min read | Library compromising the Bitwarden CLI with malware in version `@bitwarden/cli@2026.4.0` exploited a supply chain attack via compromised GitHub Actions. The malicious package, discovered by JFrog and Socket, scanned for and exfiltrated developer secrets including GitHub/npm tokens, SSH keys, and AI assistant configurations to Checkmarx-impersonating domains or public GitHub commits, impacting 334 developers and linked to the "Shai-Hulud" campaign. |
| 2026-04-24 2026 | Bitwarden CLI tool compromised: hundreds of developers pull credential-stealing malware news | The Bitwarden command-line interface (CLI) tool was compromised, leading to hundreds of developers unknowingly downloading malware that steals credentials. This incident highlights a significant security breach within the open-source ecosystem. The compromised version of the CLI tool was distributed, potentially exposing sensitive information from affected users. → cybernews.com |
| 2026-04-24 2026 | Bitwarden NPM Package Hit in Supply Chain Attack news 3 min read | Writeup detailing the compromise of the Bitwarden CLI NPM package, version 2026.4.0, in a supply chain attack. The malicious package contained code to exfiltrate secrets and tokens from Azure, AWS, GitHub, GCP, and NPM, and weaponized GitHub tokens to abuse GitHub Actions. This incident shares similarities with previous attacks on Checkmarx, including payload structure and credential harvesting methods, and shows potential links to the Shai-Hulud worm campaigns. → securityweek.com |
| 2026-04-24 2026 | Cloudsmith Raises $72M for Software Supply-Chain Security news 4 min read | Library providing software supply-chain security through artifact management. Cloudsmith, a platform from Twilio's former chief customer officer, raised $72 million to enforce policies, audit usage, and reduce exposure to malicious or compromised packages by acting as an intermediary between developers and public repositories. This approach transforms artifact management into a security layer, offering insights into package popularity, maturity, and known risks to both human developers and AI agents, while also integrating data from external security tools for more nuanced policy decisions. → bankinfosecurity.com |
| 2026-04-23 2026 | Bitwarden CLI password manager trojanized in supply chain attack news 3 min read | Writeup of Bitwarden CLI supply chain attack, where attackers published a trojanized version 2026.4.0 to npm. This malicious version, containing `bw_setup.js` and `bw1.js`, targeted cloud and development credentials, including GitHub, npm, AWS, and GCP tokens, and weaponized them for further access. The attack leveraged a compromised GitHub Action in Bitwarden's CI/CD pipeline, similar to incidents affecting Checkmarx KICS and Trivy, attributed to the TeamPCP group. Remediation involves revoking compromised tokens and keys, rotating secrets, and inspecting GitHub Actions workflows. → csoonline.com |
| 2026-04-23 2026 | Checkmarx Supply Chain Attack Exploits Docker Images and CI/CD Pipelines news 4 min read | Library exploiting Docker image poisoning and VS Code extension vulnerabilities, specifically targeting Checkmarx KICS and associated extensions (versions 1.17.0, 1.19.0), as part of a multi-stage supply chain attack by the TeamPCP group. The attack involved redirecting Docker image tags like `v2.1.20` and `alpine`, and a second-stage payload `mcpAddon.js` was executed via the Bun runtime, leading to credential harvesting of GitHub tokens, cloud credentials, and SSH keys. This campaign extended to compromise the Bitwarden CLI, demonstrating a broader trend of CI/CD pipeline abuse. → esecurityplanet.com |
| 2026-04-23 2026 | Shai-Hulud: The Third Coming Bitwarden CLI Backdoored in Latest Supply Chain Campaign news 3 min read | Analysis of Shai-Hulud worm's attack on the @bitwarden/cli package reveals its self-propagating nature, exfiltrating credentials, NPM tokens, GitHub tokens, AWS, GCP, and Azure information. The worm encrypts exfiltrated data using AES-256-GCM and uploads it to public GitHub repositories, potentially originating from Russia as it avoids Russian-configured systems. Affected users are advised to rotate keys, add 2FA, check for malicious GitHub repositories, and downgrade the @bitwarden/cli package. → ox.security |
| 2026-04-23 2026 | Tenable finds Microsoft GitHub flaw risking supply chains news 1 min read | Vulnerability in Microsoft's GitHub windows-driver-samples repository, identified by Tenable Research, allowed attackers to exploit a Python string injection flaw within a GitHub Action. This allowed the triggering of automated scripts via a standard GitHub issue, leading to the potential theft of the GITHUB_TOKEN with broad permissions. The flaw highlights risks to the software supply chain and downstream users, with recommendations including restricted token permissions and auditing workflows. |
| 2026-04-23 2026 | New Checkmarx supply-chain breach affects KICS analysis tool news 2 min read | Library compromise affects Checkmarx KICS, its Docker images, and VS Code extensions, with attackers injecting a hidden 'MCP addon' to steal credentials including GitHub tokens, AWS, Azure, and Google Cloud credentials, npm tokens, SSH keys, Claude configs, and environment variables, exfiltrating them to audit.checkmarx[.]cx. Affected users should block access to malicious domains, use pinned SHAs, revert to safe versions like DockerHub KICS v2.1.20, and rotate secrets. → bleepingcomputer.com |
| 2026-04-23 2026 | No Off Season: Three Supply Chain Campaigns Hit npm PyPI and Docker Hub in 48 Hours news 2 min read | Analysis of three recent supply chain campaigns targeting npm, PyPI, and Docker Hub, including Checkmarx KICS, CanisterSprawl (pgserve, Namastex.ai), and xinference, highlights the consistent objective of stealing developer secrets like API keys and cloud credentials. These attacks, attributed in part to threat actor TeamPCP, demonstrate sophisticated evasion techniques and cross-ecosystem propagation. → blog.gitguardian.com |
| 2026-04-23 2026 | axios npm Compromise: The Ultimate Supply Chain Scaries news 5 min read | Writeup of the axios npm supply chain compromise details how attackers leveraged social engineering to gain access to the maintainer's account, publishing malicious versions of the popular JavaScript library. The compromise, attributed to the North Korean threat actor UNC1069, allowed for cross-platform malware delivery, including RATs capable of system reconnaissance and credential harvesting. The incident highlights risks associated with deep dependency chains and the trust inherent in the open-source ecosystem, drawing parallels to previous npm attacks like Shai-Hulud and the Trivy scanner compromise. |
| 2026-04-23 2026 | Xinference allegedly hacked by TeamPCP Malicious Package In PyPi news 3 min read | Writeup of the Xinference supply chain attack on PyPI, detailing how malicious versions (2.6.0-2.6.2) were uploaded containing obfuscated infostealer code. This malware targets cloud credentials, API keys, environment variables, SSH keys, cryptocurrency wallets, and database credentials, sending stolen data to a remote server. The attack leveraged a compromised bot to inject the malicious base64 payload into the `__init__.py` file, affecting users who installed these compromised versions. Recommended actions include downgrading to version 2.5.0 and rotating sensitive keys. → ox.security |
| 2026-04-23 2026 | Aikido Security Launches Endpoint Protection for Developer Devices as Software Supply Chain Attacks Hit Unprecedented Scale news 3 min read | Library from Aikido Security, Aikido Endpoint, protects developer devices from software supply chain attacks. It inspects and blocks risky packages, IDE extensions, browser plugins, and AI tools before installation. This addresses escalating threats like the TeamPCP and Axios compromises by focusing on developer machines, which hold critical credentials. Aikido Endpoint monitors all installs, enforces policies like blocking packages younger than 48 hours, and covers npm, PyPI, Maven, NuGet, VS Code extensions, browser extensions, and AI agent marketplaces. It builds on the open-source Safe Chain CLI firewall and offers enterprise-grade governance and approval workflows. |
| 2026-04-22 2026 | Another npm supply chain worm is tearing through dev environments news 2 min read | Library for detecting npm supply chain worms, similar to CanisterWorm attacks attributed to TeamPCP and LiteLLM. This strain compromises packages like `@automagik/genie`, `pgserve`, and `@fairwords/websocket`, stealing secrets, API keys, and cryptocurrency wallet data. It exfiltrates information to both webhooks and ICP canisters, utilizing a "TeamPCP/LiteLLM method" and self-propagation logic to infect additional packages and PyPI repositories. → theregister.com |
| 2026-04-22 2026 | Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens news 4 min read | Library for detecting and preventing supply chain attacks, such as the self-propagating worm found in npm packages like `@automagik/genie` and `pgserve`. It details how these worms, like CanisterSprawl, steal developer tokens and credentials for AWS, Azure, and Google Cloud, and can propagate to PyPI packages. The library also covers attacks targeting GitHub Actions' `pull_request_target` trigger and credential harvesting via LLM proxies. → thehackernews.com |
| 2026-04-22 2026 | Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain news 5 min read | Writeup of supply chain attacks targeting Checkmarx, detailing malicious KICS Docker images and VS Code extensions. Threat actors overwrote Docker Hub tags and introduced compromised versions of the `cx-dev-assist` and `ast-results` extensions. The compromised artifacts exfiltrated GitHub tokens, AWS and Azure credentials, and SSH keys to external endpoints. These attacks, potentially by TeamPCP, leveraged stolen credentials to inject malicious GitHub Actions workflows and republish npm packages, creating further propagation paths. → thehackernews.com |
| 2026-04-22 2026 | Hypersonic Supply Chain Attacks: One Solution That Didn't Need to Know the Payload intermediate 7 min read | Library that stops zero-day supply chain attacks like those targeting LiteLLM, Axios, and CPU-Z by using on-device behavioral AI. It detects malicious execution patterns rather than relying on signatures or reputation, making it effective against previously unseen payloads delivered through trusted channels, even when AI agents automate execution with unrestricted permissions. This approach, part of SentinelOne's Autonomous Security Intelligence, flags anomalous process chains and code execution in real-time, terminating threats before they can escalate. → sentinelone.com |
| 2026-04-22 2026 | New npm supply-chain attack self-spreads to steal auth tokens news 2 min read | Library for detecting and defending against npm supply-chain attacks. This worm-like malware self-propagates by injecting malicious code into packages, stealing developer credentials, API keys, cloud service secrets, cryptocurrency wallets (MetaMask, Exodus), and targeting AI agent tooling and database operations. It can also exfiltrate data from CI/CD systems, registries, and LLM platforms, and has been observed targeting PyPI packages with .pth-based payloads. Socket and StepSecurity offer indicators of compromise and remediation guidance, advising immediate removal of affected packages and rotation of all exposed secrets. → bleepingcomputer.com |
| 2026-04-22 2026 | Axios npm Supply Chain Attack: 83M Downloads Hit news 7 min read | Library that details the March 31, 2026, Axios npm supply chain attack, where backdoored versions axios@1.14.1 and axios@0.30.4 were published, affecting 83 million weekly downloads. The attack injected a malicious dependency, plain-crypto-js, which delivered a cross-platform Remote Access Trojan (RAT) targeting macOS, Windows, and Linux. The analysis covers payload mechanics, obfuscation techniques, anti-forensics, and detection guidance, highlighting the exploit of trust in the JavaScript ecosystem. |
| 2026-04-22 2026 | Axios npm Hijack 2026: Everything You Need to Know news 10 min read | Analysis of the Axios npm Hijack 2026 details a sophisticated supply chain attack where threat actors compromised the lead maintainer's npm account, publishing malicious versions of the popular JavaScript library. These versions, [email protected] and [email protected], silently installed a cross-platform RAT (SILKBELL and WAVESHAPER.V2) via a hidden dependency upon `npm install`. The attack, attributed to UNC1069, bypassed standard CI/CD security by directly publishing to the npm registry using a stolen access token, highlighting the importance of OIDC provenance and SLSA checks. → socradar.io |
| 2026-04-22 2026 | TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files news 5 min read | Library compromising the `telnyx` Python package with versions 4.87.1 and 4.87.2 on PyPI. The malware uses audio steganography within `.WAV` files to deliver a multi-stage attack chain, harvesting credentials and exfiltrating data to `83.142.209[.]203:8080` on Linux/macOS, while establishing persistence via `msbuild.exe` on Windows. This supply chain attack by TeamPCP follows similar compromises of Trivy, KICS, and litellm. → thehackernews.com |
| 2026-04-22 2026 | litellm: Credential Stealer Hidden in PyPI Wheel news 13 min read | Library detailing a supply chain compromise within the litellm Python package. Versions 1.82.7 and 1.82.8 were found to contain a malicious payload that harvests credentials, encrypts them using AES-256 and RSA-4096, and exfiltrates them to an attacker-controlled domain. The compromise leveraged two distinct injection techniques: a `.pth` file in version 1.82.8, and an embedded base64 blob in `proxy_server.py` for version 1.82.7. This attack potentially gained initial access through a pivot from a compromise of the Trivy tool used in litellm's CI/CD pipeline. → stepsecurity.io |
| 2026-04-22 2026 | What's Coming to Our GitHub Actions 2026 Security Roadmap news 6 min read | Library for securing GitHub Actions, this roadmap details upcoming features to enhance supply chain security. Key developments include workflow dependency locking with commit SHAs for reproducibility, policy-driven execution protections through rulesets to control triggers and permissions, and scoped secrets to bind credentials to specific contexts, preventing over-permissioning and blurring trust boundaries. Additionally, enterprise-grade endpoint protections are introduced with the Actions Data Stream for visibility and a native egress firewall for control, addressing challenges seen in recent attacks like those on tj-actions/changed-files and Nx. → github.blog |
| 2026-04-22 2026 | Shai-Hulud npm Supply Chain Attack: New Compromised Packages Detected news 7 min read | Writeup on the Shai-Hulud npm supply chain attack details a significant wave of compromised packages, including new variations and obfuscation techniques. Threat actors are targeting popular npm packages to steal credentials from GitHub, NPM, AWS, GCP, and Azure, then exfiltrating this data by creating encoded repositories. The attack utilizes a data-stealer payload bundled within Webpack applications, often disguised as system optimization tools, and employs utilities like TruffleHog to gather secrets. → jfrog.com |
| 2026-04-22 2026 | LiteLLM and Telnyx Compromised on PyPI: Tracing the TeamPCP Supply Chain Campaign news 8 min read | Library detailing the TeamPCP supply chain campaign that compromised LiteLLM and Telnyx packages on PyPI. This extensive campaign began with a Trivy compromise, spread through npm and GitHub Actions, and included Kubernetes exploitation. Defenders should treat installations of LiteLLM versions 1.82.7/1.82.8 or Telnyx versions 4.87.1/4.87.2 as credential exposure events. → securitylabs.datadoghq.com |
| 2026-04-22 2026 | Keeping Your GitHub Actions Secure Part 1: Preventing Pwn Requests intermediate 9 min read | Library detailing secure GitHub Actions workflows, specifically addressing the risks of the `pull_request_target` trigger when processing untrusted pull requests. It highlights how attackers can exploit this to gain repository write permissions or steal secrets by injecting malicious code into build scripts, package.json, or npm pre/postinstall scripts. The library advocates for a `pull_request` trigger for unprivileged handling of untrusted code and a subsequent `workflow_run` trigger for privileged operations, using artifacts to safely transfer data. → securitylab.github.com |
| 2026-04-22 2026 | GitHub Actions Security Pt 1: Attacks & Defenses (Wiz) intermediate 8 min read | Library detailing GitHub Actions security, addressing common misconfigurations and outlining defensive strategies. It explains the threat model, covering risks like Pull Request pwnage and script injection, exemplified by attacks such as the Trivy supply chain compromise exploiting `pull_request_target` and `workflow_run` triggers. The entry emphasizes understanding the trust boundary between repository owners and external actors to prevent code execution with elevated permissions. → wiz.io |
| 2026-04-22 2026 | Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data beginner 3 min read | Analysis of SBOM failures reveals that while Software Bills of Materials and Vulnerability Exploitability eXchange statements offer data, security teams lack decision clarity. Supply chain attacks, including those leveraging Trivy and Axios, persist due to inconsistent interpretation of SBOM/VEX data, lack of updated SBOM delivery, and hesitations in exploitability assertions. Researcher Devashri Datta advocates for a unified, governance-driven intelligence layer to interpret SBOMs as lifecycle signals and VEX as contextual input, enabling explainable and defensible decisions amidst increasing regulatory pressure and rapid exploitation times. → securityweek.com |
| 2026-04-22 2026 | Axios supply chain attack deploys multi-OS malware news 3 min read | Analysis of the Axios supply chain attack details how malicious versions, axios@1.14.1 and axios@0.30.4, infected npm users with a cross-platform RAT. The attack, attributed to North Korean state actor Sapphire Sleet, exploited compromised npm credentials and bypassed CI/CD pipelines to deliver malware via the plain-crypto-js dependency. The RAT features obfuscated Node.js droppers, C2 communication, and self-deletion to evade detection, posing significant risks for credential and data exfiltration. Remediation involves updating or downgrading Axios and rotating secrets, with IoCs provided for affected systems. |
| 2026-04-22 2026 | Aikido Unveils Endpoint Security as Supply Chain Attacks Hit Developers news 5 min read | Library that acts as a security agent on developer machines, inspecting and blocking threats before installation. It monitors package manager installations, VS Code extensions, and AI agent skills, cross-referencing with Aikido Intel to identify malicious packages. A key feature is blocking packages published within 48 hours, addressing the critical window for new malicious distributions, and it builds on Aikido's open-source Safe Chain CLI firewall. |
| 2026-04-21 2026 | Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable news | Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable https://ift.tt/nvuCc9x → devops.com |
| 2026-04-21 2026 | CISA urges security teams to view environments following axios compromise news | CISA urges security teams to view environments following axios compromise https://ift.tt/JYRaA0z → cybersecuritydive.com |
| 2026-04-21 2026 | Introducing Endpoint Protection: Security for Developer Devices news 6 min read | Library for protecting developer devices against software supply chain attacks. It prevents malicious package installs, IDE extensions, browser plug-ins, and AI skills by offering visibility into installed software, blocking threats before installation, enforcing package age policies, and enabling approval workflows. Built upon the open-source Safe Chain project and powered by the LLM-based Aikido Intel threat intelligence engine, it aims to secure developer workstations without hindering productivity, addressing vulnerabilities exemplified by the Shai-Hulud and Axios attacks. → aikido.dev |
| 2026-04-21 2026 | The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables news 27 min read | Analysis of the Vercel breach, an OAuth supply chain attack beginning around February 2026, details how a compromised third-party application and platform environment variables bypassed traditional defenses. The incident, initiated by Lumma Stealer malware infecting a Context.ai employee, exploited Vercel's environment variable model where non-sensitive credentials were exposed to attackers with internal access. This breach highlights risks inherent in OAuth trust relationships, amplified by AI-accelerated tradecraft and significant detection-to-disclosure latency, urging architectural changes like treating OAuth apps as third-party vendors and eliminating long-lived platform secrets. → trendmicro.com |
| 2026-04-21 2026 | The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables news 27 min read | Analysis of the Vercel breach details an OAuth supply chain attack where a compromised third-party application granted long-lived, password-independent access, bypassing traditional defenses. This incident highlights the risk of platform environment variables being readable with internal access, especially when not explicitly marked as sensitive. The attack chain, initiated by Lumma Stealer malware affecting Context.ai, demonstrates AI-accelerated tradecraft and raises concerns about detection-to-disclosure latency in platform breaches, fitting a broader pattern of attacks targeting developer-stored credentials across various platforms. → trendmicro.com |
| 2026-04-21 2026 | The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables news 27 min read | Analysis of the Vercel Breach details an OAuth supply chain attack where a compromised third-party application granted unauthorized access to Vercel's internal systems. This exploit, enabled by Lumma Stealer malware infecting a Context.ai employee, allowed attackers to exfiltrate environment variables for a subset of customer projects, bypassing perimeter defenses. The incident highlights risks associated with platform environment variable models, detection-to-disclosure latency, and the broader trend of credential compromises across developer tools, emphasizing the need for architectural changes like treating OAuth apps as vendors and assuming provider-side compromise. → trendmicro.com |
| 2026-04-20 2026 | The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables news 27 min read | Analysis of the Vercel breach details an OAuth supply chain attack where a compromised third-party application granted attackers long-lived access to Vercel's internal systems. This allowed them to read environment variables, amplified by Vercel's model where non-sensitive credentials were exposed without additional controls for compromised teams. The incident highlights risks in platform environment variables, detection-to-disclosure latency, and a convergence pattern of targeting developer-stored credentials across various platforms. → trendmicro.com |
| 2026-04-20 2026 | Supply Chain Attack Hits Vercel: User Data is Being Sold on BreachForums For $2M news 5 min read | Analysis of the Vercel and Context AI supply chain attack, detailing how compromised OAuth tokens and a malicious Chrome extension led to Vercel's internal database being offered for sale on BreachForums. The incident highlights risks associated with AI systems and third-party integrations, emphasizing the need for immediate key rotation, 2FA enablement, and auditing of third-party app access, particularly for Google Workspace and Vercel-maintained packages like Next.js. → ox.security |
| 2026-04-20 2026 | Why the Axios attack proves AI is mandatory for supply chain security news 4 min read | Library for AI-powered security operations, necessitated by attacks like the recent Axios supply chain compromise by North Korean threat actors. This resource highlights how AI-driven monitoring can detect malicious code changes in real-time, a crucial capability against adversaries leveraging AI for automated reconnaissance and evasive malware. It argues that AI is essential for matching the speed and complexity of modern threats, transforming Security Operations Centers (SOCs) into agentic workflows that amplify human analysts and significantly reduce mean time to detect and respond. → cyberscoop.com |
| 2026-04-20 2026 | Aikido Security Launches Endpoint Protection for Developer Devices as Software Supply Chain Attacks Hit Unprecedented Scale news 2 min read | Library for protecting developer devices from software supply chain attacks. Aikido Endpoint inspects and blocks risky packages, IDE extensions, browser plugins, and AI tools before installation, addressing threats like those seen in the TeamPCP and Axios compromises. It monitors all installs across a machine, enforces protective defaults like blocking packages published less than 48 hours ago, and covers npm, PyPI, Maven, NuGet, VS Code extensions, and AI agent marketplaces. |
| 2026-04-20 2026 | Aikido Security Launches Endpoint Protection for Developer Devices as Software Supply Chain Attacks Hit Unprecedented Scale news 2 min read | Library for protecting developer devices against software supply chain attacks, inspecting and blocking risky packages, IDE extensions, browser plugins, and AI tools before installation. It monitors and blocks all installs across the machine, enforcing protective defaults like a 48-hour minimum install age to mitigate threats from compromised accounts and malicious packages, referencing attacks like those from TeamPCP and the Axios compromise. Coverage extends to npm, PyPI, Maven, NuGet, VS Code extensions, browser extensions, and AI agent skills marketplaces. |
| 2026-04-20 2026 | New security agent helps fight software supply chain attacks news | New security agent helps fight software supply chain attacks https://ift.tt/tRoy3LB |
| 2026-04-20 2026 | Aikido launches Endpoint to secure AI-native developer workflows news 6 min read | Library that secures AI-native developer workflows by blocking malicious packages, IDE extensions, and AI tools in real-time before they impact developer machines. Aikido Endpoint inspects installations against Aikido Intel, a threat intelligence feed, and automatically halts packages published within the last 48 hours. It offers ecosystem-wide malware protection, granular access controls with approval workflows, and visibility into AI tool usage and costs, building upon the open-source Aikido Safe Chain. |
| 2026-04-19 2026 | Shai-Hulud: A Persistent Secret Leaking Campaign — GitGuardian news 3 min read | Analysis of the Shai-Hulud campaign details a persistent supply chain attack targeting NPM packages like @ctrl/tinycolor, using malicious GitHub Actions to exfiltrate secrets from local environments and repositories. Similar to the s1ngularity and GhostActions campaigns, this attack injects compromised workflows to steal credentials, including GitHub tokens, NPM tokens, and AWS Keys. GitGuardian's HasMySecretLeaked service allows developers to check for compromised secrets without exposing their values. → blog.gitguardian.com |