The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-04-14 2026 | WordPress Supply Chain Attack Hits Thousands of Sites news 3 min read | Library of WordPress plugins compromised in a supply chain attack, impacting thousands of sites. Attackers leveraged ownership changes of popular extensions to inject backdoors, creating vulnerabilities for data theft and full site control. The incident highlights systemic risks in the open-source ecosystem, emphasizing the need for better plugin governance and transparency in acquisition practices, similar to the SolarWinds breach's impact on enterprise networks. |
| 2026-04-14 2026 | CPUID Supply Chain Attack: STX RAT Malware Distributed via Trojanized CPU-Z and HWMonitor Downloads news 6 min read | Writeup of the CPUID supply chain attack, detailing how attackers compromised the official website for HWMonitor and CPU-Z, distributing trojanized installers via Cloudflare R2. This attack leveraged DLL sideloading with a malicious cryptbase.dll to execute a five-stage in-memory attack chain, ultimately deploying STX RAT, a remote access trojan capable of stealing credentials, session cookies, and crypto wallet keys. The incident highlights the risks of compromised download channels, affecting global users across various sectors. → rescana.com |
| 2026-04-14 2026 | You Don't Have to Be Hacked to Be Compromised beginner 5 min read | Analysis of the widespread impact of the Axios JavaScript library compromise by North Korean threat actor UNC1069, highlighting how compromised developer accounts and backdoored packages like WAVESHAPER.V2 demonstrate significant software supply chain risk. This incident underscores the business imperative for robust third-party risk management, including Software Composition Analysis, dependency integrity validation, and comprehensive incident response planning for supply chain scenarios. |
| 2026-04-14 2026 | Trojan Malware Dominates as Supply Chain Attacks Escalate news 4 min read | Library for detecting trojan malware and supply chain attacks, detailing incidents like SANDWORM_MODE's data harvesting and spreading, the Trivy/LiteLLM campaign abusing trusted tools, and the axios compromise exploiting transitive dependencies. It highlights the escalating trend of attackers injecting malicious code through seemingly legitimate open-source packages and trusted release channels, emphasizing the need for vigilance beyond package names to protect developer and CI environments from credential theft and further compromise. |
| 2026-04-13 2026 | OpenAIs Mac apps needs an update thanks to the Axios hack news 2 min read | Library update requiring macOS users to install the latest versions due to a supply-chain attack on the Axios JavaScript library. A North Korean hacking group (UNC1069) injected malware into Axios after compromising its lead maintainer's accounts, impacting downstream software through millions of weekly downloads. OpenAI treated its signing certificate as compromised due to a misconfiguration in its GitHub workflow, even though no evidence suggests user data access or code alteration. → cyberscoop.com |
| 2026-04-13 2026 | OpenAI rotates macOS certs after Axios attack hit code-signing workflow news 3 min read | Library for securing applications against supply chain attacks, exemplified by OpenAI's response to a malicious Axios package compromising its GitHub Actions workflow. This incident, linked to UNC1069, led to the rotation of macOS code-signing certificates used for ChatGPT Desktop, Codex, and Atlas to prevent potential misuse of the signing key for distributing malware. OpenAI's investigation found no evidence of compromised certificates or user data, but users must update macOS applications to versions signed with new certificates before May 8, 2026, to avoid functionality loss. → bleepingcomputer.com |
| 2026-04-13 2026 | Distributed Risk: Open-Source Software as Strategic Infrastructure beginner 14 min read | Analysis of distributed risk highlights how open-source software is strategic infrastructure, vulnerable to upstream compromise attacks like the XZ Utils incident and the Axios package compromise. This "capture, poison, exploit" (CPE) framework details how malicious actors can manipulate project governance, poison distribution channels like npm and PyPI, or exploit known weaknesses such as Log4Shell in unpatched systems, leading to widespread downstream exposure and geopolitical leverage. |
| 2026-04-13 2026 | OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack news 2 min read | Writeup detailing the Axios supply chain attack, where malicious NPM packages of the popular JavaScript HTTP client were distributed by North Korea-linked hackers. OpenAI was impacted, with a GitHub Actions workflow for macOS app-signing inadvertently downloading and executing a compromised Axios version. While OpenAI believes its macOS signing certificate was not compromised, they are revoking and rotating it as a precaution against potential code signing abuses. Evidence suggests widespread impact, with malicious versions seen in multiple environments. → securityweek.com |
| 2026-04-13 2026 | OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident news 7 min read | Writeup detailing the OpenAI macOS app certificate revocation following a supply chain incident involving the malicious Axios library, which was poisoned by UNC104 and delivered a WAVESHAPER.V2 backdoor. The incident, alongside another targeting Trivy and leading to the deployment of the SANDCLOCK credential stealer and CanisterWorm, highlights widespread risks to open-source ecosystems and cloud environments, with vendors like CrowdStrike, Microsoft, and Trend Micro analyzing related campaigns such as CVE-2026-33634. → thehackernews.com |
| 2026-04-12 2026 | OpenAI Rotates macOS App Certificates After Axios Supply-Chain Attack Says No User Data Was Breached news 3 min read | Library for detecting and mitigating supply-chain attacks, exemplified by the Axios vulnerability (version 1.14.1) impacting OpenAI's macOS applications. This resource addresses how compromised third-party developer tools can lead to certificate rotation and requires users to update applications like ChatGPT Desktop, Codex, and Atlas. The incident highlights risks to CI/CD pipelines and code-signing systems, a growing trend where attackers target developer infrastructure rather than end-users directly. |
| 2026-04-12 2026 | OpenAI identifies security issue involving third-party tool says user data was not accessed news 1 min read | Writeup of a software supply chain attack affecting OpenAI, where a compromised third-party tool, Axios, was downloaded via a misconfigured GitHub Actions workflow. The attack attempted to exfiltrate a signing certificate for macOS applications like ChatGPT Desktop, Codex, and Atlas, but OpenAI's analysis indicates the certificate was likely not compromised. User data, API keys, and passwords remained unaffected. OpenAI is updating security certifications and requiring users to update macOS apps. |
| 2026-04-11 2026 | OpenAI Issues Urgent Warning: macOS Users Must Update ChatGPT & Codex Immediately news | OpenAI Issues Urgent Warning: macOS Users Must Update ChatGPT & Codex Immediately https://ift.tt/ekBf2XK |
| 2026-04-11 2026 | OpenAI Flags ChatGPT Desktop Security Issue After Attack news 4 min read | Library update highlights supply chain risks in Axios compromise, impacting OpenAI's ChatGPT Desktop and other tools by leveraging malicious code injection via GitHub workflows. This incident forced OpenAI to revoke and replace security certificates, underscoring the need for robust app verification to prevent fake applications. Separately, Google's Pentagon deal for AI integration into classified networks, unlike Anthropic's refusal due to concerns over autonomous weapons and domestic surveillance, raises questions about safeguards and employee dissent within AI firms. |
| 2026-04-11 2026 | DPRK Threat Actor Compromises Axios NPM Package news 9 min read | Library that analyzes a North Korea-nexus threat actor's compromise of the popular "axios" NPM package. The attacker introduced a malicious dependency, "plain-crypto-js," which acted as an obfuscated dropper for the WAVESHAPER.V2 backdoor across Windows, macOS, and Linux. The dropper uses `postinstall` hooks and OS-specific techniques involving PowerShell, curl, and bash to download and execute platform payloads, aiming for reconnaissance and command execution. GTIG attributes this to financially motivated UNC1069, noting infrastructure overlaps and the evolution of the WAVESHAPER backdoor. → cloud.google.com |
| 2026-04-11 2026 | 16 Minutes to Impact: npm crypto-draining malware news 11 min read | Library for detecting and mitigating npm supply chain compromises, detailing a September 2025 incident where attackers leveraged phishing to inject cryptocurrency-draining malware into popular JavaScript packages like 'chalk'. The malware intercepted browser traffic and manipulated wallet transactions, highlighting risks to crypto businesses and applications. It also details malware capabilities such as multi-chain targeting, real-time address manipulation, and stealth features designed to evade detection. |
| 2026-04-11 2026 | Widespread npm Supply Chain Attack: Billions at Risk news 8 min read | Analysis of a widespread npm supply chain attack targeting 18 popular packages, including debug, chalk, and ansi-styles, which are downloaded billions of times weekly. The attack, initiated via phishing and account compromise, injected crypto-stealing malware designed to hijack cryptocurrency transactions by imperceptibly altering destination addresses before user signing. This incident highlights the critical risks inherent in the open-source software supply chain, emphasizing the need for robust security measures to prevent malicious code propagation within development pipelines and cloud environments. → paloaltonetworks.com |
| 2026-04-11 2026 | npm Supply Chain Attack: debug, chalk, and Beyond news 6 min read | Library for detecting and mitigating widespread npm supply chain attacks, specifically detailing the debug/chalk incident. This resource unpacks how malicious versions of popular packages, including debug and chalk, were distributed and bundled into frontend applications. The attack hijacks browser network and wallet APIs to silently rewrite cryptocurrency recipients and approvals, diverting transactions to attacker-controlled wallets. It highlights the rapid propagation through CI/CD pipelines and the scope beyond initial reports, emphasizing the need for ongoing vigilance and registry updates. → wiz.io |
| 2026-04-11 2026 | The Nx s1ngularity Attack: Inside the Credential Leak news 8 min read | Tool for scanning local environments for compromise from the Nx s1ngularity supply chain attack. It detects leaked credentials, including GitHub tokens, npm keys, SSH private keys, API keys, and cryptocurrency wallet files, and checks for exploitation of LLM client configuration files for tools like Claude and Gemini. The tool also provides a privacy-preserving service to check if specific secrets were exfiltrated. → blog.gitguardian.com |
| 2026-04-11 2026 | s1ngularity: Nx supply chain attack leaks secrets news 4 min read | Writeup of the s1ngularity Nx supply chain attack, detailing how malicious Nx build system npm packages led to the exfiltration of sensitive developer assets like cryptocurrency wallets, GitHub tokens, and SSH keys. The attack leveraged AI CLI tools for reconnaissance and initially exfiltrated data to attacker-controlled GitHub repositories, which were later disabled by GitHub. A subsequent phase involved using leaked GitHub tokens to publicly expose over 5500 private repositories. The compromise was attributed to a flawed GitHub Actions workflow using `pull_request_target` with unsanitized pull request titles, granting arbitrary command execution and elevated permissions. → wiz.io |
| 2026-04-11 2026 | CISA 2025 Minimum Elements for SBOM beginner | Guidance on CISA's 2025 Minimum Elements for Software Bill of Materials (SBOM) seeks public comment to update the 2021 NTIA SBOM Minimum Elements. This revised guidance enhances software transparency and supply chain security by providing a detailed inventory of software components, enabling better risk management and vulnerability identification. It emphasizes machine-processable formats for scalable implementation and integration into cybersecurity practices, with comments due by October 3, 2025, via the Federal Register. |
| 2026-04-11 2026 | SLSA 3 Compliance with GitHub Actions and Sigstore intermediate 4 min read | Library for achieving SLSA 3 compliance, integrating GitHub Actions with Sigstore's Cosign, Fulcio, and Rekor. This solution automates the generation of non-forgeable build provenance for Go projects, enabling verification of software authenticity and build origins. It addresses supply chain security concerns highlighted by incidents like Log4j and Solarwinds, allowing users to audit and replicate builds without managing their own signing keys. → github.blog |
| 2026-04-11 2026 | cosign Verification of npm Provenance and GitHub Attestations intermediate 4 min read | Library for verifying npm provenance, GitHub Artifact Attestations, and Homebrew provenance using the cosign v2.4.0 release. It demonstrates how to verify artifacts by retrieving bundles containing signed attestations and applying verification policies via command-line flags. The library supports verifying public and private GitHub repositories, and also integrates with Homebrew's provenance. |
| 2026-04-11 2026 | Securing CI/CD After tj-actions and reviewdog Attacks beginner 6 min read | Guide detailing security hardening for GitHub Actions workflows following the tj-actions/changed-files and reviewdog/action-setup supply chain attacks. It explains the chained exploitation, tag redirection, and log-based exfiltration techniques used by attackers, emphasizing the dangers of mutable tags, unprotected secrets, and overly broad access controls. The guide offers a defense-in-depth blueprint including pinning to commit SHAs, enforcing MFA, enabling tag protection, avoiding persistent credentials, and implementing runtime monitoring to secure CI/CD pipelines. |
| 2026-04-11 2026 | GitHub Actions Supply Chain Attack: Coinbase to tj-actions news 30 min read | Writeup of a GitHub Actions supply chain attack, detailing how attackers compromised tj-actions/changed-files and reviewdog/action-setup. This multi-layered attack initially targeted Coinbase's open-source project agentkit before escalating to impact thousands of repositories by injecting malicious payloads that leaked CI/CD runner secrets and credentials. The analysis highlights abuse of third-party actions and dependencies, emphasizing the need for detection and prevention steps for consumers and maintainers. → unit42.paloaltonetworks.com |
| 2026-04-11 2026 | tj-actions/changed-files supply chain attack news 6 min read | Library update detailing a supply chain attack on the tj-actions/changed-files GitHub Action, leading to CVE-2025-30066. The compromise involved a malicious payload that leaked secrets from affected repositories into workflow logs, including AWS access keys, GitHub PATs, and private RSA keys. Mitigation steps include stopping usage of the affected action, rotating leaked secrets, pinning actions to commit hashes, and utilizing GitHub's allow-listing features. The attack vector likely involved compromising a GitHub personal access token. → wiz.io |
| 2026-04-11 2026 | tj-actions/changed-files compromise (CVE-2025-30066) news 2 min read | Alert detailing a supply chain compromise affecting the tj-actions/changed-files GitHub Action (CVE-2025-30066). This vulnerability, potentially linked to a reviewdog/action-setup@v1 compromise (CVE-2025-30154), allowed for the disclosure of secrets such as access keys, PATs, npm tokens, and private RSA keys. CISA urges users to audit repositories, rotate compromised secrets, and update to patched versions to mitigate this risk. |
| 2026-04-11 2026 | XZ Backdoor CVE-2024-3094 - JFrog news 10 min read | Analysis of CVE-2024-3094 details a sophisticated supply chain attack on XZ Utils, versions 5.6.0 and 5.6.1, which allowed unauthorized remote SSH access. The malicious payload, injected into the OpenSSH server (SSHD), modified decryption routines using ChaCha20 and Ed448 signatures to enable attackers with a specific private key to execute arbitrary commands or bypass authentication. The article outlines detection methods, remediation steps including downgrading and system restarts, and a kill switch, along with JFrog OSS tools for vulnerability scanning. → jfrog.com |
| 2026-04-11 2026 | xz Backdoor CVE-2024-3094 - OpenSSF news 3 min read | Writeup on CVE-2024-3094, detailing a sophisticated backdoor inserted into xz/liblzma versions 5.6.0 and 5.6.1. The backdoor was obfuscated within distribution tarballs, targeting RPM or DEB packages for x86-64 architecture built with gcc and the gnu linker, with the potential to break sshd authentication. The OpenSSF highlights how community vigilance and the paced release process of Linux distributions helped contain the impact, while emphasizing ongoing efforts to secure the open source supply chain. |
| 2026-04-11 2026 | XZ Utils backdoor (CVE-2024-3094) overview beginner 7 min read | Reference to CVE-2024-3094 details a significant backdoor discovered in xz-utils versions 5.6.0 and 5.6.1, impacting the sshd binary and enabling remote code execution. The article curates high-quality external analyses, OSINT reports, and technical breakdowns, including information on its distribution across Fedora, Debian, Kali, and Arch Linux. It also provides historical context, referencing past supply chain attack attempts on open-source software dating back to Ken Thompson's work. → securitylabs.datadoghq.com |
| 2026-04-11 2026 | Ultralytics PyPI package delivers coinminer news 4 min read | Library compromise of Ultralytics PyPI package: Malicious versions 8.3.41, 8.3.42, 8.3.45, and 8.3.46 distributed an XMRig coinminer by exploiting a GitHub Actions script injection. This allowed attackers to execute arbitrary code, leading to multiple releases containing downloader code in __init__.py. The initial compromise involved crafted pull requests to inject malicious payloads, with subsequent malicious versions published due to maintainers not fully locating the breach. This supply chain attack had a significant potential impact due to Ultralytics' widespread adoption. → reversinglabs.com |
| 2026-04-11 2026 | Supply-chain attack analysis: Ultralytics beginner 5 min read | Analysis of the Ultralytics supply-chain attack details how compromised GitHub Actions and PyPI API tokens led to malicious code injection in versions 8.3.41, 8.3.42, 8.3.45, and 8.3.46. The incident highlights the importance of securing build workflows, the use of Sigstore transparency logs, and PyPI provenance attestations for detecting and preventing future attacks. Recommendations include revoking unused API tokens, configuring GitHub Environments, and publishers auditing workflows for insecure patterns like `pull_request_target`, pinning dependencies, utilizing Trusted Publishers, and avoiding committing binary files. |
| 2026-04-11 2026 | GitLab discovers widespread npm supply chain attack news 7 min read | Library for detecting and analyzing the "Shai-Hulud" npm supply chain attack, which uses a destructive malware variant. The malware harvests credentials from GitHub, npm, AWS, GCP, and Azure, exfiltrates data, and propagates by infecting other packages. It features a "dead man's switch" that triggers data destruction if its propagation and exfiltration channels are severed, employing techniques like multi-stage loading, credential harvesting, and automated package republishing. |
| 2026-04-11 2026 | Shai-Hulud: Self-Replicating Worm Compromises 500+ NPM Packages news 12 min read | Library for detecting and analyzing the Shai-Hulud worm, which compromised over 500 NPM packages including @ctrl/tinycolor. This attack featured self-propagation via `NpmModule.updatePackage`, credential harvesting using TruffleHog and cloud SDKs for AWS, GCP, and Azure, and persistence mechanisms involving GitHub Actions workflows. The malware specifically targeted Linux and macOS environments, exfiltrating secrets like GitHub tokens and AWS access keys. → stepsecurity.io |
| 2026-04-11 2026 | Shai-Hulud npm supply chain attack overview news 9 min read | Writeup on the Shai-hulud npm supply chain attack, a self-replicating worm that compromises npm accounts to infect legitimate packages. This malware inserts malicious code into packages, spreading via `postinstall` scripts, and exfiltrates cloud service tokens (npm, GitHub, AWS, GCP) by installing TruffleHog and targeting specific secrets. The worm also attempts to exfiltrate GitHub tokens via malicious workflows and convert private repositories to public, impacting popular packages like ngx-bootstrap and ng2-file-upload. → reversinglabs.com |
| 2026-04-11 2026 | Shai-Hulud Worm Compromises npm Ecosystem news 8 min read | Analysis of the Shai-Hulud 2.0 npm worm details its aggressive propagation through pre-install execution, bypassing static analysis. This campaign targets GitHub repositories, stealing credentials for AWS, GCP, and Azure, exfiltrating them to public GitHub repositories, and even attempting to destroy home directories as a fallback. The worm also automates its spread by injecting malicious code into other packages maintained by compromised developers, potentially crippling CI/CD pipelines and leading to significant cloud service compromises. LLMs may have assisted in generating its obfuscated payload. → unit42.paloaltonetworks.com |
| 2026-04-11 2026 | Shai-Hulud 2.0: 25K+ Repos Exposed news | Shai-Hulud 2.0: 25K+ Repos Exposed → wiz.io |
| 2026-04-11 2026 | Shai-Hulud 2.0: Detection and Defense Guidance intermediate 9 min read | Library providing detection and defense guidance for the Shai-Hulud 2.0 supply chain attack, which compromised numerous npm packages via preinstall scripts and stole credentials using tools like TruffleHog. It details attack propagation paths, the use of fake personas like "Linus Torvalds," and offers mitigation strategies including credential rotation, CI/CD isolation, and leveraging Microsoft Defender for its code scanning, posture management, and runtime anomaly detection capabilities. → microsoft.com |
| 2026-04-11 2026 | Shai-Hulud 2.0 npm worm: analysis intermediate 9 min read | Analysis of Shai-Hulud 2.0, a self-replicating npm worm that backdoored 796 packages, reveals its sophisticated credential-stealing payload. This worm utilizes the Bun JavaScript runtime to evade detection, harvests credentials from local filesystems and cloud environments (AWS, Google Cloud, Azure) using techniques like `trufflehog` and accessing instance metadata services, and exfiltrates them to public GitHub repositories. It self-propagates by injecting malicious files like `setup_bun.js` and `bun_environment.js` into other npm packages, and can also establish GitHub self-hosted runners for remote code execution via vulnerable GitHub Actions. → securitylabs.datadoghq.com |
| 2026-04-11 2026 | Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise news 10 min read | Analysis of supply chain compromise via attacks on Trivy and Axios, demonstrating the future of malware delivery. Attackers leveraged vulnerabilities in open source tools, including a vulnerability scanner and a JavaScript library, to steal secrets and plant backdoors. These incidents highlight the growing threat of sophisticated social engineering and the potential for AI-driven attacks to target developer environments and compromise tens of thousands of organizations. → theregister.com |
| 2026-04-11 2026 | Mac ChatGPT App Gets Urgent Security Update After Supply Chain Threat news | Mac ChatGPT App Gets Urgent Security Update After Supply Chain Threat https://ift.tt/mp4TwQ6 |
| 2026-04-11 2026 | CrowdStrike: Stolen credentials used in Axios npm supply chain attack news 1 min read | Analysis of the Axios npm supply chain attack, where stolen maintainer credentials were used to inject ZshBucket malware variants across Linux, macOS, and Windows. The attack, attributed by CrowdStrike to Stardust Chollima, demonstrates enhanced malware capabilities including data exfiltration, remote command execution, and a unified JSON-based communication protocol. This incident highlights the significant risk posed by compromised open-source libraries to software supply chains. |
| 2026-04-11 2026 | The Scanner Was the Weapon: 36 Months of Precision Supply Chain Attacks Against DevSecOps Infrastructure advanced 16 min read | Library detailing 36 months of precision supply chain attacks, highlighting compromises of DevSecOps tools like vulnerability scanners and CI/CD pipelines. It examines the XZ Utils backdoor (CVE-2024-3094), the reviewdog GitHub Actions compromise (CVE-2025-30066 / CVE-2025-30154), and the multi-stage infostealer targeting Aqua Security's Trivy. The analysis reveals attacker sophistication in targeting trusted software, leveraging build-time injection and automated trust exploitation. → cloudsek.com |
| 2026-04-10 2026 | Supply chain attack at CPUID pushes malware with CPU-Z/HWMonitor news 3 min read | Library for analyzing supply chain attacks, specifically detailing a compromise at CPUID that distributed malware via trojanized versions of CPU-Z and HWMonitor. The attack involved DLL sideloading using a malicious CRYPTBASE.dll and delivered the STX RAT infostealer. This incident highlights a pattern targeting widely used utilities, similar to a prior FileZilla compromise. → bleepingcomputer.com |
| 2026-04-10 2026 | Renovate & Dependabot: The new Malware Delivery System news 8 min read | Library analyzing how automated dependency updaters like Renovate and Dependabot can inadvertently accelerate malware distribution in supply chain attacks. It details how these tools, designed for efficiency, can bypass security scrutiny by automatically merging malicious package updates, as seen with the Axios and trivy-action compromises. The entry highlights the implicit trust afforded to bot-generated pull requests and their potential to introduce malware rapidly, even into CI/CD pipelines through workflow modifications. → blog.gitguardian.com |
| 2026-04-10 2026 | Supply Chain Attacks Are Exploiting Our Assumptions beginner 12 min read | Library of techniques for defending against software supply chain attacks, addressing implicit trust assumptions exploited by attackers. It analyzes recent incidents such as the XZ Utils backdoor, npm and PyPI package compromises like `rustdecimal` and `torchtriton`, and attacks leveraging compromised accounts (e.g., `ctrl/tinycolor`, `Nx`, `rspack`). The library highlights methods to move beyond dependency scanning and SBOMs, focusing on verifying code provenance and build integrity to mitigate risks from deceptive doubles, stolen secrets, and poisoned pipelines. → blog.trailofbits.com |
| 2026-04-10 2026 | Protecting Your Software Supply Chain: Typosquatting and Dependency Confusion intermediate 9 min read | Library detailing typosquatting and dependency confusion attacks on software supply chains. These attacks exploit developers' typographical errors when downloading packages from registries like npm and PyPI, or through compromised dependencies. Real-world examples such as the Codecov and Event Stream breaches highlight how attackers infiltrate systems by mimicking legitimate packages, leading to data breaches, system compromises, and reputational damage. The library provides insights for engineering managers and security practitioners to protect their infrastructure from these evolving threats. → blog.gitguardian.com |
| 2026-04-10 2026 | LiteLLM PyPI Packages Compromised in TeamPCP Supply Chain Attacks news 2 min read | Library versions 1.82.7 and 1.82.8 of the LiteLLM Python package, a unified interface for AI model switching, were compromised on PyPI by the TeamPCP group. The malicious versions contained a credential stealer and malware dropper, posing significant risks due to LiteLLM's access to API keys and configuration data. This incident is part of a broader campaign by TeamPCP, which also targeted Aqua's Trivy scanner and CheckMarx's VS Code extensions. Sonatype advises affected organizations to remove the malicious package, rotate credentials, and investigate for persistence mechanisms. → helpnetsecurity.com |
| 2026-04-10 2026 | Supply-Chain Attack Defense: Developer Host Machine Hardening intermediate 6 min read | Library for hardening developer host machines against supply-chain attacks, detailing configurations for Python (pip, uv) and JavaScript/TypeScript (npm, pnpm, yarn, bun). It implements defenses such as release age gates and disabling install scripts, referencing techniques like `uv`'s `exclude-newer` and `npm`'s `min-release-age` and `ignore-scripts`. The guide also provides guidance on verifying AI-suggested packages and detecting suspicious package behavior through tools like Socket.dev. |
| 2026-04-10 2026 | TeamPCP Credential Infostealer Chain Attack Reaches Python's LiteLLM news 10 min read | Library for detecting credential infostealer supply chain attacks, specifically detailing the TeamPCP campaign targeting Python's LiteLLM. This multi-stage attack chain exploits vulnerabilities in Trivy, GitHub Actions, Docker images, and npm packages, ultimately compromising LiteLLM through a malicious `.pth` file executed upon interpreter startup. The malware harvests a wide array of credentials including SSH keys, cloud provider secrets, Kubernetes tokens, and Git credentials, exfiltrating them to a compromised domain, and can deploy privileged DaemonSets in Kubernetes environments. |
| 2026-04-10 2026 | Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers news 4 min read | Library for interacting with the dYdX v4 protocol, compromised versions of the JavaScript (`@dydxprotocol/v4-client-js`) and Python (`dydx-v4-client`) packages have been found to steal cryptocurrency wallet credentials and, in the Python version, execute remote access trojans. Threat actors inserted malicious code into core registry files, exploiting developer account compromise to distribute these poisoned updates across ecosystems. The attack also highlights risks associated with un-published packages on npm, where typosquatting can lead to malware distribution. → thehackernews.com |