The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-11-01 2026 | A Backdoored Claude Code Extension Shipped Through Cursor’s Marketplace. Here’s What to Check news AI | A malicious Claude code extension, identified by the same ID but with altered code, was available on Cursor's marketplace for approximately 11 hours. This backdoor allowed for remote SSH access and persisted even after the extension was uninstalled. Up to 5,000 developers may have been impacted. |
| 2026-11-01 2026 | The Claude Code extension backdoor: check every profile, not just yours news AI | The Claude Code extension, a popular AI coding assistant, was compromised for several hours on Thursday, transforming into an SSH backdoor. This vulnerability affected all users, meaning developers should check not just their own profiles but every profile linked to their accounts. |
| 2026-11-01 2026 | Black October 2026: The Month Secrets Became the Target advanced Secrets | "Black October 2026: The Month Secrets Became the Target" is an analysis by a SOC analyst in training. It examines what vulnerabilities in PHP2Shell, LiteLLM, Railway, and eMudhra reveal to security operations center analysts. The article focuses on lessons learned from these incidents, highlighting how secrets became prime targets during this period. |
| 2026-10-31 2026 | The 23-Year-Old Flaw at the Heart of CPAN: An RCE in the Perl Infrastructure news RCE | A critical Remote Code Execution (RCE) vulnerability has been discovered in CPAN, the Comprehensive Perl Archive Network, a core component of the Perl ecosystem. This flaw, present for 23 years, allows attackers to execute arbitrary code on systems that build or install Perl modules from CPAN. The vulnerability resides in the way CPAN handles untrusted module metadata, potentially enabling malicious code injection during the build process. This presents a significant security risk to the vast number of users and systems relying on Perl and its extensive module library. |
| 2026-10-31 2026 | Slopsquatting: When Your AI Assistant Invents a Package Name, Someone Else Registers It news AI | AI assistants can lead to "slopsquatting," where a package name they invent is registered by someone else before the developer can. This happened to one developer when an AI-suggested package, not vetted by them, was added to their project's dependencies. This led to a security risk as a malicious actor could have exploited this situation. The key takeaway is the need for rigorous vetting of AI-generated code and dependencies. |
| 2026-10-31 2026 | When the Update Is the Attack: How to Stay Safe While Your Dependency Is Poisoned beginner | Dependency confusion attacks, where malicious code is introduced into software libraries, are a growing threat. This article explores how to mitigate these risks. Key strategies include implementing stricter dependency management policies, using version pinning, and leveraging tools that scan for vulnerabilities. Developers should also be cautious of updates from untrusted sources and conduct thorough code reviews before integrating new dependencies. The goal is to build a more resilient software supply chain by educating developers and providing them with practical defense mechanisms against increasingly sophisticated attacks. |
| 2026-10-31 2026 | Claude Code Extension 2.1.313 Planted an SSH Key. Uninstalling It Does Not Remove It. news AI | The Claude Code Extension, version 2.1.313, has been found to plant an SSH key on user systems. A significant number of users, potentially up to 5,000, may have received a tampered build. Crucially, uninstalling the extension does not remove the planted SSH key. Users are advised to check their systems for the key using its fingerprint, not its label, to ensure its removal. |
| 2026-10-31 2026 | Serena RCE via insecure pickle deserialization of LSP symbol cache intermediate 5 min read AI Deser Python RCE | Library for exploiting insecure pickle deserialization in Serena, enabling Remote Code Execution (RCE) via a crafted LSP symbol cache. By embedding a malicious `document_symbols.pkl` within an attacker-controlled repository's `.serena/cache/` directory, any user activating that project triggers arbitrary code execution when Serena's language server loads the poisoned cache. This vulnerability, classified as CWE-502, affects serena-agent versions <= 1.7.1 and requires no user interaction beyond opening the malicious repository, bypassing existing trust mechanisms. |
| 2026-10-29 2026 | Apple's git still trusts the compromised eMudhra certificates news 2 min read | Writeup detailing how Apple's macOS developer tools, including git, curl, and python3, continue to trust compromised eMudhra certificates, leaving them vulnerable to man-in-the-middle attacks. This allows attackers to intercept HTTPS connections, enabling code injection via git clones and pulls, alteration of pushes, and theft of credentials. The article provides commands to check for affected git and curl instances and suggests manual remediation steps until Apple ships a permanent fix. |
| 2026-10-29 2026 | PHP2Shell Won't Be the Last. Here's Where the Next One Will Show Up First. news 7 min read RCE | Library for discovering and securing PHP environments, offering proactive measures against vulnerabilities like PHP2Shell (CVE-2026-109618, CVE-2026-109619) and a partial bypass (CVE-2026-115560). It emphasizes outside-in discovery to build an inventory before advisories are public, enabling rapid response and continuous vulnerability testing against internet-facing systems. The library supports tracking PHP deployment methods, version identification, and targeted exploit checks, crucial given the increasing speed of AI-assisted exploit development and shrinking patching windows. → snyk.io |
| 2026-10-27 2026 | The Pwn Request Reckoning: What Still Works Against GitHub Actions intermediate 8 min read | Library updating GitHub Actions security, this resource details residual risks from Pwn request vectors after GitHub's 2026 platform changes. It highlights surviving attack paths including SHA pinning to older `actions/checkout` versions, bypassing `actions/checkout` via direct `git` commands or third-party actions, exploitation of privileged triggers like `issue_comment` and `repository_dispatch`, and script injection through unvalidated event interpolations. The library also covers artifact poisoning and persistent self-hosted runner state as exploitable data channels. → wiz.io |
| 2026-10-26 2026 | Broccoli2Shell: Brotli decoder RCE in Node.js, Python and more intermediate 6 min read Deser RCE | Writeup detailing Brotli decoder RCE vulnerability (CWE-252, CWE-787) in Node.js, Python (via `Brotli`, `brotlicffi`, `urllib3`, `requests`, `aiohttp`, `httpx`), and other software utilizing the C reference decoder. The bug, present in Brotli versions 1.0.3 through 1.2.0, allows a crafted stream to cause an out-of-bounds write, leading to memory corruption or code execution. The fix involves upgrading to patched versions of Brotli, Node.js, or distribution packages and restarting affected services. Workarounds include uninstalling vulnerable Python packages or rejecting `Content-Encoding: br` request bodies. |
| 2026-10-26 2026 | Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability intermediate 3 min read RCE | Writeup of CVE-2026-111497, "Broccoli2Shell," a critical Brotli decoder vulnerability. This out-of-bounds write flaw affects Node.js, Bun, Envoy Proxy, and other components, allowing attackers to trigger memory corruption or RCE via specially crafted compressed data. Exploitation necessitates applications decompressing untrusted Brotli content, posing significant risk to cloud environments where 91% of resources are vulnerable. Remediation involves applying security updates, identifying affected workloads, and potentially disabling Brotli decompression as a temporary mitigation. → wiz.io |
| 2026-10-26 2026 | Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles news 6 min read Secrets | Library that detects and disrupts the "Gheist" campaign, an automated attack leveraging compromised GitHub tokens to exfiltrate repository secrets. The campaign plants `sync-check.yml` workflows, attempting to leak secrets via encoded payloads and environment variables, even targeting cloud credentials in enterprise environments. GitHub's security controls are blocking exploitation in public repositories, but private repositories remain vulnerable. The library aids in hunting for suspicious branches and workflow logs, responding by rotating secrets and revoking tokens, and hardening security with measures like OIDC scoping and ephemeral self-hosted runners. → wiz.io |
| 2026-10-23 2026 | Reversing a DPRK-linked toolkit that backdoors VS Code, Cursor, Discord and npm, with an Ethereum dead-drop C2 and a DEV#POPPER variant advanced RCE | A DPRK-linked toolkit has been identified that backdoors popular developer tools like VS Code, Cursor, Discord, and the npm package manager. The toolkit utilizes an Ethereum "dead-drop" for command and control (C2) communication, a novel technique that leverages the blockchain for covert communication. Additionally, a variant of the DEV#POPPER malware is incorporated. |
| 2026-10-23 2026 | Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497) news 6 min read RCE | Library for detecting Node2Shell (CVE-2026-111497), a Node.js vulnerability allowing remote code execution via a Brotli decompression flaw. It identifies affected repositories and container images running vulnerable Node.js or Bun versions (prior to Bun 1.4.4), specifically highlighting risks from decompressed request bodies or outbound `fetch()` calls to untrusted servers. The library aids in prioritizing upgrades to patched Node.js versions (22.23.4, 24.22.1, 26.12.1) or Bun 1.4.4+. → aikido.dev |
| 2026-10-22 2026 | LiteLLM Compromised, Steals Credentials news 5 min read Secrets | Writeup of LiteLLM supply chain attack, where malicious version 1.107.0, uploaded to PyPI and Docker, contained a credential stealer targeting browser, cloud, and AI secrets, and dormant C2 capability. The attack leveraged stolen GitHub CLI OAuth tokens to compromise the release workflow. The payload utilized a dual-technique approach with `.pth` files and `sitecustomize.py`, appearing to be the first documented case in the wild, and involved LLM-aided development. Post-exploitation activity included abuse of stolen AWS credentials for LLM-jacking. → wiz.io |
| 2026-10-22 2026 | LiteLLM compromised again: infostealer and RAT found in version 1.107.0 news 5 min read Secrets | Writeup on the compromise of LiteLLM version 1.107.0, detailing the injection of an infostealer and a remote access trojan into its Python wheels and Docker image. The infostealer targets credentials from browsers, SSH keys, cloud provider secrets, and developer tools, while the RAT provides arbitrary code execution. The attack exploited a `pyproject.toml` directive to bundle malicious files, `cook.pth` and `cook.py` for the infostealer, and `sitecustomize.py` for the RAT, which executes via `maturin`'s `data = "cook"` build directive. → aikido.dev |
| 2026-10-20 2026 | Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack news 13 min read AI | Library detailing AI-driven cloud attacks, examining their characteristics like machine speed, cross-platform activity, and credential chaining. It discusses real-world incidents, including initial access via Java RCE in Kafka, and subsequent operations within GCP and AWS control planes. The library highlights how AI agents exploit vulnerabilities such as path traversal in developer tools, and rapidly iterate on failed attempts, often labeling resources with terms like "pentest." → wiz.io |
| 2026-10-20 2026 | Supply Chain Zero Days: Closing the Gap Between Publication and Detection news 4 min read | Library for detecting compromised npm packages at publication, analyzing new versions with static and dynamic analysis, and an AI classifier to identify zero-day supply chain threats. It flags malicious packages before CVEs are published, providing detection rules in Wiz Defend, and preventing the spread of malware like that seen in the keyv and Axios compromises. → wiz.io |
| 2026-10-19 2026 | Anthropic’s Free OSS Scanner: What It Means For Your Team news 7 min read Secrets | Library from Anthropic, OSS Scanner, offers free vulnerability analysis for eligible open-source projects using advanced AI models like Claude Mythos. It identifies issues, suggests patches, and reports directly to maintainers, drastically accelerating vulnerability discovery and patching. While this shifts the security bottleneck from detection to the more complex challenge of responsible and large-scale remediation, organizations must still manage prevention, context-aware prioritization, and the actual implementation of fixes across their estates. → jfrog.com |
| 2026-10-17 2026 | The Cloudflare Appstore (Appflare) Malware Audit advanced 7 min read | Library analyzing Cloudflare apps identified sensitive data leaks in two applications, rdyrct and 888wiki. The audit, conducted using Codex, focused on credential theft, hidden data collection, and backdoors across 139 local and 138 published app entries. rdyrct was found to transmit password reset tokens to an upstream analytics service (stats.brnr.dev), while 888wiki's private pages, including note titles and paths, were sent to a tracker (flow.aiurl.tw), and its file uploads for non-image types were directed to external hosts like box.david888.com. |
| 2026-10-16 2026 | VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build? intermediate 9 min read AI | Benchmark of AI agents' ability to fix vulnerable dependencies without breaking builds. VulnBump tested AI agents like Snyk's Evo Remediation Agent and Anthropic's Claude Code on 307 real dependency upgrades across six package managers. Evo Remediation Agent successfully fixed vulnerabilities and maintained build integrity in 90.2% of cases, significantly outperforming Claude Code, especially when provided with Snyk's recommended upgrade versions and scan results. The benchmark highlights that while AI can maintain build stability, accurately identifying and fixing vulnerabilities remains a key challenge, with purpose-built agents like Evo Remediation Agent showing superior performance. → snyk.io |
| 2026-10-15 2026 | tensorlake@0.5.144: A Worm With Valid Provenance, and the Firewall Rule That Stops It intermediate 4 min read | Library entry detailing the Shai-Hulud credential-stealing worm found in tensorlake@0.5.144, which collected npm tokens, SSH keys, and cloud credentials. The worm self-republished into other packages, making it a worm. Hextrap's scanner identified suspicious code and install hooks, automatically flagging the malicious version. The article highlights how a 72-hour soak time firewall rule prevents installation of new, unvetted package versions, stopping compromised releases like this one before they can execute. |
| 2026-10-15 2026 | Governing the Agentic SDLC Through Continuous Policy Enforcement advanced 11 min read AI | Reference for the Agentic Process Evidence Protocol, an open standard designed to provide accountability and traceability in the AI-driven Software Development Life Cycle (SDLC). It addresses challenges posed by ephemeral AI agents, such as the EU AI Act and OWASP AISVS requirements for logging and oversight, by defining a structured specification for capturing tamper-evident, signed attestations of agent actions, model usage, and human oversight. This protocol aims to enable automated policy enforcement, post-release troubleshooting, and satisfy audit requirements by binding verifiable evidence to commits and releases. → jfrog.com |
| 2026-10-15 2026 | Package managers have an integrity problem intermediate 20 min read | Analysis of 25 package managers reveals widespread vulnerabilities in detecting compromised package repositories. While cryptographic hashes and signatures offer solutions, fewer than half of tested managers default to lockfiles that check for tampering, and only two verify the integrity of every downloaded package. The research highlights variations in cryptographic designs, with only Go verifying signatures by default, and points to communities developing improved integrity solutions for future adoption. → blog.trailofbits.com |
| 2026-10-14 2026 | Codex CLI installs a persistent, self-updating background daemon by default news 3 min read Secrets | Issue detailing a vulnerability where the Codex CLI, installed via npm, defaults to auto-starting a persistent, self-updating background daemon. This daemon copies itself into a separate release directory, decoupling its version from the installed CLI. Users report significant background downloads and the daemon persisting even after closing all Codex windows, requiring manual intervention to disable or stop. Proposed solutions include making daemon auto-start opt-in and implementing an execution receipt to clearly identify the daemon's binary and environment. |
| 2026-10-14 2026 | The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk beginner 3 min read AuthZ | Writeup detailing an opportunistic attack on a European bank, originating from a poorly configured third-party gateway and exploiting compromised credentials. The attacker performed extensive network scanning and brute-force authentication attempts, then attempted to exploit a WSUS RCE vulnerability. Cortex XDR contained the threat before persistence was achieved. The incident underscores the importance of foundational security hygiene, strict identity access controls, timely patching, and endpoint detection against unsophisticated but damaging intrusions. → unit42.paloaltonetworks.com |
| 2026-10-11 2026 | GitHub Actions leaking secrets when Miri output is cached intermediate 3 min read Secrets | Library issue where Miri's environment variable caching in the `target/` directory, combined with GitHub Actions' caching mechanism, can expose secrets to pull requests. This vulnerability, observed in projects utilizing Miri with cached `target/` directories, allows malicious actors to extract sensitive information through CI caches. A fix limits Miri to preserving only specific `CARGO_*` environment variables and `OUT_DIR`, mitigating the risk. |
| 2026-10-09 2026 | [tl;dr sec] #349 - Vulns & Exploits in the AI Era, Package Manager Sandboxing, Testing AI Sandboxes news 10 min read AI | Survey of AI era vulnerability trends, package manager sandboxing, and AI sandbox testing. This entry details the increase in CVE disclosures, explores how package managers like Homebrew and opam handle install-time code, and discusses the security of Vercel and Perplexity's sandboxes, along with supply chain attacks targeting Terraform providers and Go Modules through malware like Graphalgo. Techniques for finding IDORs with tools like XBOW and HTTP/3 support in Burp Suite's Turbo Intruder are also highlighted. → tldrsec.com |
| 2026-10-08 2026 | Evolution of Web3 in Cloud Supply Chain Attacks intermediate 8 min read | Analysis of Web3 in Cloud Supply Chain Attacks details how threat actors leverage decentralized blockchain architectures for command-and-control (C2) infrastructure, moving beyond static endpoints. Campaigns like ChainDrop and PolinRider demonstrate the exploitation of open-source dependencies to harvest cloud identity tokens and secrets. These attacks, attributed to state-sponsored actors like Alluring Pisces, utilize techniques such as EtherHiding and TxDataHiding across networks like TRON, Aptos, and Binance Smart Chain to dynamically update botnets and maintain persistence, bypassing traditional security controls. → unit42.paloaltonetworks.com |
| 2026-10-02 2026 | Your SBOM Is Fan Fiction news 8 min read | Tool for runtime Software Bill of Materials generation; queries `/proc` for process dependencies and maps, then correlates with package data and CVE advisories using `yeet.graph.query` and `yeetkit` for enriched security insights on live systems. |
| 2026-10-02 2026 | Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders news 10 min read Secrets | Analysis of GitGuardian's Public Monitoring Agents enhances credential leak detection by identifying hardcoded secrets in public GitHub commits, a problem amplified by developer personal repositories and incidents like the CISA leak. This updated tool categorizes public incidents with new verdicts ("Related," "Uncertain," "Unrelated") to prioritize company-relevant exposures, streamlining investigations by organizing the incident queue around relevance and providing reasoning for each verdict. → blog.gitguardian.com |
| 2026-10-01 2026 | Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts intermediate 8 min read | Library for securing Kubernetes supply chains, WizOS Helm Charts offers hardened, signed, and CVE-scanned packages. It addresses risks in community charts, such as unmaintained dependencies and vulnerable CI/CD workflows, by rebuilding and signing all charts within Wiz's own secure pipeline. This ensures that deployed software is free from upstream vulnerabilities and misconfigurations, with scheduled patching and verified provenance for compliance. → wiz.io |
| 2026-09-30 2026 | The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub intermediate 5 min read Secrets | Library for investigating multi-platform data exfiltration across AWS and GitHub, showcasing autonomous SOC investigation by uncovering compromised credentials, stolen source code, and custom data exfiltration tooling. It traces attack chains involving suspicious VPN activity, unusual API calls, and known offensive tools, correlating signals across platforms to identify staged Python scripts like `mssql_table_export.py`, `pg_table_export.py`, and `billing_export2.py` used to extract sensitive data. The investigation also highlights initial access via GitHub, where private repositories were cloned using a compromised token from a Zenlayer IP. → wiz.io |
| 2026-09-27 2026 | AI on Kubernetes: Default Helm Chart Security Configurations and Lateral Movement Risks intermediate 49 min read AI | Analysis of 15 default AI Helm charts reveals significant security gaps. Ten of fourteen charts omit native API authentication, and all six tested live accepted unauthenticated requests. Ten charts fail to enforce non-root execution, with seven combining this with unauthenticated access. All charts mount default ServiceAccount tokens, 14 lack default NetworkPolicies, and 4 grant cluster-wide Secret read access. The LiteLLM chart specifically embeds plain-text database credentials in environment variables. Operators must configure authentication, network policies, and non-root execution before production deployment. |
| 2026-09-25 2026 | Lunex Unmasked: A New Information Stealer Deployed Through BYOVD intermediate 17 min read Mobile | Library detailing the Lunex information stealer, a four-stage attack chain targeting Ukrainian users. This analysis uncovers the loader's Bring Your Own Vulnerable Driver (BYOVD) technique to disable kernel-level security, the use of obfuscated strings, and privilege escalation via auto-elevating COM objects. Lunex steals browser credentials, cryptocurrency wallets, and establishes persistent access, with its command-and-control infrastructure traced to a CIS-aligned, financially motivated threat actor. |
| 2026-09-25 2026 | [tl;dr sec] #347 - AI Agents Hacking Companies for $25, Threat Hunter's Guide to GitHub, Finding Gadgets Like it’s 2026 news 13 min read AI | Library for analyzing supply chain toolchains and Git repository usage. It detects project tools, maps them to CWE/OWASP categories, and identifies dangerous functions. It also analyzes dependency history over time, scans against OSV, checks licenses, and flags potential supply chain tampering. Additionally, this entry includes techniques for investigating GitHub PAT compromise using a six-step approach and a threat hunting guide for GitHub audit logs to detect compromised accounts, source code exfiltration, and pivoting. → tldrsec.com |
| 2026-09-24 2026 | Send GitLab an email, push to main intermediate 8 min read RCE | Library for identifying vulnerabilities in GitLab's incoming email feature, where a leaked project email address grants attackers account-wide access. This allows for pushing code to protected branches, running CI/CD jobs, and exfiltrating secrets, bypassing IP restrictions that would otherwise block access. The embedded token acts as a powerful Personal Access Token, and its inherent design risks significant compromise without a mechanism for selective revocation or sender verification. → aikido.dev |
| 2026-09-23 2026 | Graphalgo campaign spreads to Terraform providers and Go Modules news 7 min read | Writeup detailing the Graphalgo campaign's expansion into Terraform providers and Go Modules, marking the first observed malware distribution via Terraform. The analysis highlights compromised packages like gocommunity-io/dockerd and kreuzwenker/docker, and Go Modules gocommunity.io/orderedbtree and gogets.dev/btreex. It describes the malware's sophisticated command-and-control mechanisms utilizing Slack channels and an Ethereum smart contract on Arbitrum Sepolia for encrypted communication and code execution, including a second-stage RAT. → aikido.dev |
| 2026-09-18 2026 | What a Supply Chain Attack Is Really After: Your Credentials beginner 5 min read Secrets | Ebook detailing credential-harvesting software supply chain attacks, such as Shai-Hulud 2.0 and Trivy compromise, focusing on how malicious packages target developer environments and CI/CD pipelines to steal GitHub tokens, package publishing credentials, SSH keys, and cloud credentials, enabling attackers to propagate and gain further access. → blog.gitguardian.com |
| 2026-09-15 2026 | Dependabot vs Renovate beginner 12 min read | Library comparing Dependabot and Renovate, two dependency management tools. Dependabot excels with zero-setup simplicity on GitHub, while Renovate offers deeper configuration and multi-platform support for monorepos and complex setups. Both tools, however, are limited by their reflexive version bumping, which risks breaking changes and introducing new vulnerabilities. The article suggests that true dependency security requires reachability analysis and integration with SAST and secrets detection, like that offered by Aikido Security. → aikido.dev |
| 2026-09-11 2026 | [tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms news 8 min read AI | Library for securing applications, this catalog entry highlights research and tools addressing evolving threats. It includes an analysis of AI models' effectiveness in code review, demonstrating how AI can generate exploits from bug descriptions, and a cheatsheet for Digital Forensics and Incident Response on version control systems like GitHub and GitLab. The entry also touches on the challenge of false positives in detection tools and the implications of agentic worms. → tldrsec.com |
| 2026-09-09 2026 | Compromised Flutter package on pub.dev contains XCSSET malware news 7 min read Python | Library containing a malicious variant of XCSSET malware detected in the `universal_file_viewer` Flutter package on pub.dev. This malware infects macOS systems by injecting build hooks into Android Gradle projects, Xcode projects, and Git repositories, and exfiltrates sensitive data from browsers, desktop applications, and clipboard. The XCSSET worm spreads via build process infection and can persist by replacing the Launchpad Dock tile. → aikido.dev |
| 2026-09-06 2026 | HOL Guard intermediate AI Secrets | Local-first runtime security for AI coding agents and MCP tooling. It sits between an agent and the tools it wants to run so developers can approve or deny risky shell commands, secret reads, prompt-injection-driven actions, malicious packages, and MCP changes before execution. |
| 2026-09-05 2026 | Self-hosted Coder: check whether you pulled a registry module on Aug 31. no CVE, so nothing will flag it for you news 8 min read | Tool for detecting compromise of Coder's registry modules. This tool checks for unauthorized IP addresses, tampered modules serving `dlp.sh` or `dlp-docker.sh`, and exfiltration to `coder-infra.com`. It addresses the GHSA-vx42-ghc9-gw65 vulnerability by scanning Coder deployments, provisioners, images, and egress logs for indicators of compromise, recommending credential rotation and patching. |
| 2026-09-04 2026 | CrowdStrike introduces real-time supply chain attack protection news | Library for real-time supply chain attack protection, intercepting malicious software packages at the endpoint before embedded scripts execute. It leverages AI coding agent acceleration of open-source package adoption to combat adversaries poisoning software components, functioning as a final checkpoint by examining package-manner transactions at the command line. This solution extends existing endpoint protection without new agents or proxies, offering granular controls and automatic remediation of compromised packages. → msspalert.com |
| 2026-09-04 2026 | How Developers Prevent Production Risk at the Source beginner 5 min read | Library for integrating security checks directly into the software development lifecycle, focusing on early detection and remediation of vulnerabilities. It supports security at various stages, including developer sessions with AI agents, commit gates, pull request analysis, repository scanning, and CI/CD pipeline build gates. The library aims to reduce production risk and operational costs by addressing security flaws at the code level, preventing issues like CVEs in base images (e.g., node:20-slim) and hardcoded secrets from reaching production. → wiz.io |
| 2026-09-04 2026 | CrowdStrike Extends Its Endpoint Advantage to Secure the Software Supply Chain news 2 min read | Library introducing Real-Time Supply Chain Attack Protection, a Falcon platform innovation that blocks malicious open-source packages at the endpoint before execution. This capability counters threats like DPRK-nexus adversary STARDUST CHOLLIMA poisoning AI framework packages and eCrime actor ALTERED SPIDER compromising software dependencies. It intercepts at the command line, preventing embedded scripts from running and securing the broader enterprise attack surface widened by AI agents. |
| 2026-09-04 2026 | CrowdStrike Introduces Real-Time Supply Chain Attack Protection on Falcon Platform news 1 min read | Library protecting against real-time supply chain attacks on the Falcon platform intercepts malicious open-source packages like those from npm and PyPI at the endpoint before their embedded code executes. This innovation uses the existing Falcon sensor to block compromised packages across Windows, macOS, and Linux, even as they are installed via package managers like `npm install` or `pip install`. It provides granular controls, global package inventory, and automatic remediation through Charlotte Agentic SOAR, making the endpoint the control point for software supply chain security. |