The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-06-29 2026 | Malware and Sha1-Hulud TeamPCP is increasing Phoenix rebases malware Blue Shield endpoint agent against dev news 6 min read | Library for supply chain security, Blue Shield, blocks malicious packages and AI agent skills by analyzing behavior rather than relying on CVE advisories. It operates across developer workstations, CI/CD pipelines, and AI agent sessions to prevent threats like the Shai-Hulud worm and TeamPCP's automated package releases, offering a behavioral analysis that identifies risks before they execute, even for novel attack campaigns. |
| 2026-06-29 2026 | Your Software Supply Chain Only Proves Where Code Came From Not Whether Its Safe beginner | The current software supply chain model primarily tracks the origin of code, but fails to guarantee its safety. It's akin to knowing which farm your vegetables came from without verifying if they were sprayed with pesticides. This leaves organizations vulnerable to vulnerabilities and malicious code that can be hidden within legitimate software components. A more robust approach is needed to ensure the integrity and security of software throughout its lifecycle, moving beyond mere provenance to genuine assurance. → hackernoon.com |
| 2026-06-29 2026 | Polymarket Supply-Chain Attack Analysis: $3 Million Cryptocurrency Theft via Compromised Third-Party Dependency news 4 min read | Analysis of the Polymarket supply-chain attack details a $3 million cryptocurrency theft resulting from malicious JavaScript injected via a compromised third-party dependency. This incident, leveraging MITRE ATT&CK techniques T1195.002 (Supply Chain Compromise) and T1059.007 (JavaScript), bypassed frontend defenses and tricked users into approving fraudulent transactions. The attack, resembling Magecart campaigns, focused solely on frontend interactions, with no backend compromise, and resulted in stolen ParyonUSD converted to ETH. → rescana.com |
| 2026-06-29 2026 | Active Exploitation Alert: Miasma Malware Campaign Targets npm Packages and GitHub Actions in Major Supply Chain Attack news 4 min read | Writeup of the Miasma malware campaign, a sophisticated supply chain attack targeting npm packages and GitHub Actions. This campaign utilizes a novel "Phantom Gyp" technique, bypassing traditional security controls and enabling a self-propagating worm. It results in widespread credential theft across cloud providers like AWS, GCP, and Azure, CI/CD persistence via AI assistant poisoning, and exfiltration through GitHub repositories, impacting thousands of downstream projects. → rescana.com |
| 2026-06-28 2026 | Everybody's shipping code they can't read intermediate 3 min read | Library that protects against malicious dependencies introduced by AI-generated code. It highlights recent attacks where threat actors compromised popular package ecosystems, like the @mastra AI-agent ecosystem, by publishing malicious versions of common libraries. These poisoned packages execute scripts at install time to download further payloads, target crypto wallets, and establish persistence across operating systems. The library aims to prevent these compromised packages from being installed, offering a solution for securing AI-assisted development workflows. → aikido.dev |
| 2026-06-27 2026 | Packagist is now protected by Aikido Intel and other updates to the PHP registry news 4 min read | Library that integrates Aikido Intel for malware blocking in Composer, protecting PHP developers by preventing installation of known malicious packages by default in Composer 2.10 and higher. This enhancement, alongside Packagist's stable version immutability and plans for minimum release age and organizational ownership, significantly bolsters the security of the PHP ecosystem against attacks like account hijacking and malicious package distribution, mirroring positive security trends across other package registries like npm, PyPI, crates.io, and RubyGems. → aikido.dev |
| 2026-06-27 2026 | npm now freezes high-impact accounts after risky account changes news 3 min read | Library for mitigating npm account takeovers; it implements a 72-hour read-only cooldown for high-impact accounts following sensitive actions like email changes or 2FA recovery code usage. This defense, inspired by incidents like the axios compromise, prevents attackers from immediately publishing malicious code after gaining account access, complementing existing npm security features like staged publishing and trusted publishing. It aims to catch account takeovers before they impact the registry. → aikido.dev |
| 2026-06-26 2026 | Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack news 3 min read | Writeup on Miasma malware's supply chain attacks, targeting npm packages like hexo-deployer-wrangler and LeoPlatform, alongside GitHub Actions and the Go ecosystem via projects like Verana Blockchain. The campaign leverages npm registry poisoning, binding.gyp execution, Bun-staged JavaScript loaders, and GitHub dead-drop infrastructure to steal developer credentials and propagate malware. It also exploits GitHub Actions secret theft by dropping workflows named "Run Copilot" to capture CI/CD environment secrets and uses modified token relay markers for dead drop resolution, as seen with the codfish/semantic-release-action compromise. → thehackernews.com |
| 2026-06-26 2026 | [tl;dr sec] #334 - Thinkst's Package Proxy, OpenAI Daybreak, AI Agents & Canaries news 10 min read AI | Library that proxies package manager requests, such as npm and pip, to enforce security policies before installation. It leverages Cloudflare Workers to intercept metadata requests, analyze packages, and either block installations with a 404 or fetch and serve safe packages, offering checks for package age, upload regression, and allow/block lists. → tldrsec.com |
| 2026-06-25 2026 | Hackers Poisoned 170 Popular npm and PyPI Packages in a 5-Hour Blitz TanStack Mistral AI UiPath Hit news 7 min read | Library for analyzing a recent software supply chain attack where attackers poisoned over 170 popular npm and PyPI packages, including those from TanStack, Mistral AI, and UiPath, in a rapid five-hour blitz. The attack leveraged CI/CD pipelines and targeted secrets like API keys and cloud credentials. Recommendations include implementing a 24-hour delay for new package versions, auditing GitHub Actions configurations, and treating dependencies as part of the security perimeter. |
| 2026-06-25 2026 | GitHub Actions Updates Checkout to Block Forked Pull Request Supply Chain Attacks in CI/CD Workflows intermediate 5 min read | Library update to GitHub's actions/checkout action, version 7 and later, defaults to blocking risky pull request checkouts in privileged CI/CD workflows. This mitigates supply chain attacks by preventing the checkout of code from forks in `pull_request_target` and certain `workflow_run` events, protecting against exploitation of secrets. While effective, alternative code checkout methods or explicit opt-outs via `allow-unsafe-pr-checkout: true` remain vulnerable, necessitating ongoing vigilance and workflow audits. → rescana.com |
| 2026-06-25 2026 | ShapedPlugin Pro WordPress Plugins Supply Chain Attack: Credential Theft Backdoors and Mitigation Guidance intermediate 4 min read | Writeup detailing the ShapedPlugin Pro WordPress plugins supply chain attack. Malicious code was injected via the vendor's update system, compromising paying customers and leading to credential theft, backdoors, and SEO spam. Techniques observed include T1195.002 (Supply Chain Compromise), T1059 (Command and Scripting Interpreter), and T1078 (Valid Accounts). Mitigation involves updating affected plugins, rotating credentials, and auditing for suspicious files. → rescana.com |
| 2026-06-25 2026 | Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets intermediate 4 min read Secrets | Writeup detailing the compromise of the `codfish/semantic-release-action` GitHub Action. Attackers exploited tag manipulation to inject malicious code, leveraging the Miasma credential-stealing toolkit and its `thebeautifulsnadsoftime` dead drop marker. The malicious payload utilized the Bun runtime via `oven-sh/setup-bun` to execute obfuscated JavaScript, potentially stealing `GITHUB_TOKEN` and `NPM_TOKEN` secrets. Indicators include specific commit hashes and the presence of the `thebeautifulsnadsoftime` string. → aikido.dev |
| 2026-06-25 2026 | Hunting Leaked PyPI Tokens: 62 Live, 125 Packages Exposed news 4 min read Python Secrets | Library for analyzing leaked PyPI tokens, using the `pypitoken` module to decode macaroons and identify project restrictions. The research identified 62 live tokens and 125 exposed packages with approximately 25,000 monthly downloads, demonstrating a gap in automated scanning safeguards on platforms like GitHub. → blog.gitguardian.com |
| 2026-06-25 2026 | How JFrog and NanoClaw are Bringing Software Supply Chain Security to the Age of Autonomous AI beginner 4 min read AI | Library integrating JFrog Platform with NanoClaw's open-source agent framework to secure autonomous AI runtime agents. This solution routes all agent requests for packages, CLI tools, and MCP servers through JFrog registries for real-time security evaluation and blocking of compromised dependencies, preventing vulnerabilities like those associated with critical CVEs. JFrog Curation automatically identifies and installs clean alternatives, enabling agents to self-correct without human intervention, thereby extending supply chain security to AI agents and providing auditable logs of all agent activity. → jfrog.com |
| 2026-06-24 2026 | Exclusive: Meet AIVEX a New Triage Model Built to Reduce Supply Chain Threat and Risk beginner 6 min read | Library extension AIVEX, an addition to CycloneDX VEX, transforms context-rich data from a safety relevance interpretation layer (SRIL) into a machine-readable format. SRIL enriches vulnerability data with four dimensions: safety domain classification, lifecycle stage mapping, consequence severity modification, and exploitability in context. This combination addresses the inadequacy of traditional SBOMs, VEX, and CVSS scores for triaging vulnerabilities in AI-driven systems, particularly those controlling physical robots, by providing crucial operational context to risk assessments. → securityweek.com |
| 2026-06-24 2026 | Preventing Future Supply Chain Attacks: The OX Guide to Version Pinning Installation Cooldown and Defense in Depth intermediate 12 min read | Guide detailing defense-in-depth strategies against software supply chain attacks, focusing on strict version pinning for deterministic build pipelines, installation cooldowns to avoid the "golden hour" of malicious package distribution, and disabling package hooks with flags like –ignore-scripts. It emphasizes treating lockfiles as the absolute source of truth using exact-match commands like `npm ci`, and enforcing namespace scoping with private registries, offering an alternative to default auto-resolve behaviors that accelerate upstream malware delivery. → ox.security |
| 2026-06-24 2026 | Priorities from the OpenSSF Secure Open Source Software Summit 2023 news 2 min read | Guide for securing OSS repositories, developed from OpenSSF Secure Open Source Software Summit 2023 priorities. It offers practical guidelines for GitHub and GitLab platforms, complementing OpenSSF Scorecard. This resource helps developers, maintainers, and organizations implement better security for SCM workflows, permissions, and policies. → snyk.io |
| 2026-06-24 2026 | What nearly 10,000 developer environments reveal about agentic development risk beginner 8 min read AI | Analysis of nearly 10,000 developer environments reveals widespread adoption of AI coding tools like Claude and Cursor, with 43% using multiple environments. Model Context Protocol (MCP) servers are present in over half of developers' setups, presenting security risks, as 1 in 7 with MCP servers experienced findings, including prompt injection. Agent skills, which dictate agent behavior, are also a growing risk layer, with 22.8% of developers using them, and a separate study showing 13.4% of public skills containing critical vulnerabilities. This shift necessitates expanding traditional AppSec controls to encompass the developer environment itself. → snyk.io |
| 2026-06-24 2026 | 5 Socket security alternatives and why they are better beginner 14 min read | Library comparing Socket security alternatives, highlighting Aikido Security as a stronger option. It notes Socket's strengths in behavioral package analysis for supply chain attacks, but points out limitations in providing actionable fixes beyond upgrades, managing alerts across multiple repositories, and install-time protection bypasses. Socket also lacks container scanning, runtime protection, comprehensive license detection, and broader AppSec capabilities like SAST, DAST, or IaC scanning, leading to potential tool sprawl and increased incident risk. → aikido.dev |
| 2026-06-24 2026 | Aikido x Drydock | A way for maintainers to catch malware before it ships intermediate 3 min read | Library for maintainers that integrates with Drydock to review staged package releases for malware before publishing. It analyzes staged npm packages by downloading tarballs, diffing them against previous versions, and flagging security-relevant changes like new lifecycle scripts, unexpected files, or network-accessing code. For PyPI or non-staged npm packages, it operates as a GitHub Actions gate. The tool supports npm and PyPI at no cost, allowing maintainers to catch malicious code before it enters public repositories. → aikido.dev |
| 2026-06-24 2026 | Stop Treating Coding Agent Plugins Like Settings: Introducing Agent Plugins Repositories intermediate 4 min read AI | Library introducing Agent Plugins Repositories, a solution for managing AI coding agent plugins as executable software, not settings. This addresses the security risks of unmanaged GitHub repos and direct copies from Slack by providing versioning, provenance, and audit trails for plugins, similar to how npm packages and Docker images are managed. The library enables signed, immutable releases, unified access control, and complete audit trails through JFrog Artifactory, preventing supply-chain attacks on AI tooling. → jfrog.com |
| 2026-06-24 2026 | OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat advanced 10 min read AI | Analysis of malicious skills on OpenClaw's ClawHub marketplace, including infostealers like cluw and AMOS, evasion techniques like inflated file sizes, and novel agentic threats such as runtime affiliate injection and front-running. These threats exploit the AI supply chain, leveraging semantic instruction hijacking to bypass technical constraints and gain unauthorized access to agent credentials and authenticated sessions. Early campaigns featured Base64-encoded droppers, paste-site redirects, and persistence via auto-updaters, while later analysis revealed continued use of established delivery templates with fresh infrastructure. → unit42.paloaltonetworks.com |
| 2026-06-23 2026 | GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns news 3 min read | Library update from GitHub's `actions/checkout` v7 blocks common pwn request attack patterns by default in `pull_request_target` and `workflow_run` workflows when processing pull requests from forks. This change prevents the execution of malicious code with elevated privileges, safeguarding against vulnerabilities exploited in recent attacks like the compromise of Nx build system packages, PostHog, and TanStack. Developers should still review workflows, restrict permissions, and avoid executing untrusted code, as this update focuses specifically on checkout behavior. → thehackernews.com |
| 2026-06-23 2026 | ShapedPlugin Supply Chain Attack Backdoors Pro Plugin Updates news 3 min read | Writeup of the ShapedPlugin supply chain attack, where attackers compromised the vendor's build pipeline to inject backdoor code into Pro plugin updates for products like Real Testimonials Pro and Product Slider Pro between April and June 2026. The malware establishes a two-stage infection, including a self-deleting loader and a sophisticated payload that disguises itself, creates a REST API backdoor, bundles file managers, installs webshells, and bypasses logins. Notably, it exfiltrates Two-Factor Authentication TOTP seeds, making password rotation insufficient. Forensic evidence suggests a CI/CD pipeline compromise, with C2 infrastructure linked to Russian-based entities. → securityaffairs.com |
| 2026-06-23 2026 | Leaky Vessels: runC and BuildKit container escape vulnerabilities - everything you need to know news 10 min read RCE | Writeup on CVE-2024-21626 affecting runC and CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653 impacting BuildKit details container escape vulnerabilities. CVE-2024-21626 allows host filesystem access via leaked file descriptors, while BuildKit flaws can lead to host file modification or deletion through race conditions and mount exploitation. Exploitation typically requires control over container images, Dockerfiles, or launch arguments. → wiz.io |
| 2026-06-23 2026 | Weak Hash vulnerability discovered in crypto-js and crypto-es (CVE-2023-46233 & CVE-2023-46133) news 6 min read | Library for detecting the "Use of Weak Hash" vulnerability (CVE-2023-46233 & CVE-2023-46133) affecting crypto-js and crypto-es. These libraries, particularly crypto-js due to its discontinued maintenance, are susceptible to brute-force attacks when using PBKDF2 with insecure SHA1 and low iteration counts. Updated versions address this by increasing iterations to 250000, mitigating risks to stored passwords and signatures. → snyk.io |
| 2026-06-23 2026 | Secure your software supply chain with the new Snyk Vulnerability Intelligence for SBOM ServiceNow integration news 2 min read | Integration that brings Snyk package vulnerability intelligence to SBOMs stored in ServiceNow. This tool identifies vulnerability severity within application and software package contexts, offering fix information and remediation guidance. It automates the creation of application vulnerable items in ServiceNow Vulnerability Response, enabling task assignment, progress tracking, and stakeholder notification. The integration aids in managing risks from zero-day vulnerabilities, such as recent http2 or curl vulnerabilities, and facilitates the analysis of third-party SBOMs for pre-deployment vulnerability assessment. → snyk.io |
| 2026-06-22 2026 | Hackers hijacked Hola Browser for secret crypto mining news 4 min read | Writeup of a supply chain attack that compromised Hola Browser (version 1.251.91.0) to secretly mine Monero cryptocurrency on user devices. The malicious `me{.}exe` file bypassed Microsoft Defender exclusions, disguised itself as `HolaMonitorService{.}exe`, and established a persistent background service, only activating when the computer was idle. The attack highlights the risks of software supply chain vulnerabilities and the importance of keeping applications updated. → kaspersky.com |
| 2026-06-22 2026 | ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack news 2 min read | Writeup on a supply chain attack impacting ShapedPlugin's Pro WordPress plugins, specifically Product Slider Pro for WooCommerce (CVE-2026-49777), Real Testimonials Pro, and Smart Post Show Pro. Threat actors injected backdoor code into official update channels, leading to credential theft, arbitrary file writes, and data exfiltration including `wp-config.php` contents and WooCommerce order data. The incident, tracked as CVE-2026-10735, affects licensed Pro versions distributed via account.shapedplugin[.]com. → thehackernews.com |
| 2026-06-22 2026 | Homebrew to Packages: No ID No Service beginner 3 min read | Library update details Homebrew 6.0.0's new supply-chain security measures, which mimic npm's approach by requiring explicit user trust for third-party repositories and blocking untrusted installation scripts. This includes a "Guestlist" of pre-approved remote URLs and a `trusted` flag for state management, alongside Bubblewrap integration for sandboxing builds on Linux. Package maintainers and CI/CD pipelines may need to update installation instructions and scripts. → devops.com |
| 2026-06-22 2026 | Security Posture Management for GitHub: spotting and fixing risks in your GitHub organization just got a lot easier beginner 3 min read | Library for Security Posture Management for GitHub, this tool identifies and mitigates risks from misconfigured GitHub organizations, repositories, and branches. It evaluates misconfigurations, identity, and secrets, alongside cloud context, to prioritize attack paths impacting your VCS. Customers can measure their posture against the OpenSSF's Source Code Management Best Practices Guide by assessing their GitHub instance against over 30 configuration rules. → wiz.io |
| 2026-06-22 2026 | Backdoor in XZ Utils allows RCE: everything you need to know news 8 min read RCE | Analysis of CVE-2024-3094, a critical supply chain compromise affecting XZ Utils versions 5.6.0 and 5.6.1. This backdoor, discovered through unusual SSH behavior, enables RCE by altering liblzma compilation and hooking RSA_public_decrypt during SSH authentication. Exploitation requires specific conditions like x86-64 Linux, Debian/RPM package builds, and particular environment variables, making it difficult to detect during manual builds. Mitigation involves downgrading XZ Utils to versions earlier than 5.6.0 and hunting for suspicious activity. → wiz.io |
| 2026-06-22 2026 | Defense in depth: XZ Utils intermediate 4 min read | Tool for detecting and mitigating CVE-2024-3094, a backdoor affecting XZ Utils. This application uses agentless scanning and SBOM search to identify exposure, and offers CLI scanning and runtime policies for prevention. It also leverages Linux sensors for detecting post-exploitation activity. → wiz.io |
| 2026-06-22 2026 | Finding the needle in the haystack: effortless SBOM search in your cloud with Wiz beginner 4 min read | Tool for cloud SBOM search, Wiz enables users to locate specific libraries and packages across their cloud environments. It helps identify obsolete or vulnerable components, such as the xz-utils backdoor (CVE-2024-3094), and the resources they are installed on. This visibility aids in risk assessment, remediation planning, and compliance by providing a comprehensive view of deployed software, including versions like Log4j and OpenSSL. → wiz.io |
| 2026-06-21 2026 | Your control tower to secure code across GitHub, GitLab, and Azure Repos intermediate 4 min read API Sec | Library for unifying application security across GitHub, GitLab, and Azure Repos. It leverages a Security Graph for holistic code visibility, ownership mapping, and vulnerability detection, including third-party libraries, IaC misconfigurations (Terraform, CloudFormation, Kubernetes), secrets, and malware. Wiz also enforces over 40 VCS configuration rules aligned with OpenSSF SCM Best Practices and OWASP TOP10 CI/CD risks, offering prioritized risk and attack path analysis. → wiz.io |
| 2026-06-21 2026 | Kroger’s approach to supply chain security beginner 4 min read | Library integrating a shift-left approach to software supply chain security, utilizing Snyk Code and APIs for proactive vulnerability detection and SBOM generation. Kroger’s implementation emphasizes developer efficiency and risk management, with features that scan pull requests, alert on suspicious package downloads, and automate compliance for PCI DSS 4.0 requirements. The platform supports the company’s efforts in navigating complex technology stacks and addressing open-source dependency risks. → snyk.io |
| 2026-06-20 2026 | GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok beginner 9 min read | Library for securing open-source development against threats like malware repositories, repo confusion, typosquatting, and dependency confusion. It emphasizes code vetting, repository authentication, and provides best practices for developers and security teams. Tools like Snyk Advisor and Snyk Learn are mentioned for assessing package health and improving security knowledge. → snyk.io |
| 2026-06-20 2026 | Securing your SBOM on Google Cloud intermediate 4 min read | Guidance on securing SBOMs details NSA recommendations for open source software management, secure repository creation, and crisis management. Practices include evaluating OSS, risk assessment, maintaining internal repositories, vulnerability response, and creating validated SBOMs with details on components, versions, and licenses. Snyk integrates with Google Cloud services like CloudBuild, Artifact Registry, and GKE to help users find and fix vulnerabilities, scan containers, and generate enriched SBOMs. → snyk.io |
| 2026-06-20 2026 | The XZ backdoor CVE-2024-3094 news 8 min read | Analysis of CVE-2024-3094, a critical backdoor in the liblzma library affecting Linux distributions like Debian and Fedora. The exploit, a sophisticated supply chain attack, targeted x86-64 Linux systems using glibc and GCC, aiming to bypass SSH authentication and potentially achieve remote code execution. The vulnerability leverages modified build files and the GNU C Library's IFUNC mechanism to compromise OpenSSH. Detection methods using Snyk CLI for applications and containers are also outlined. → snyk.io |
| 2026-06-19 2026 | VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks intermediate 3 min read | Library introducing a two-hour delay for VS Code extension auto-updates to mitigate supply chain attacks, following similar cooldown mechanisms in package managers like Pip and npm. While this new protection aims to provide a window for detecting malicious updates, it notably exempts "trusted publishers." Critics suggest the delay is too short, with alternative proposals including sandboxing extensions and staged rollouts. The change offers teams disabling auto-updates more control via policy-based allowlists or internal marketplaces. → infoq.com |
| 2026-06-19 2026 | Supply chain attack on lottie-player: everything you need to know news 3 min read | Library compromise impacting lottie-player versions 2.0.5 through 2.0.7. Malicious code injected via a compromised npm token allowed attackers to serve Web3 wallet connection prompts, aiming to steal cryptocurrency. Organizations like 1inch were affected, with at least one reported loss of 10 Bitcoin. Developers should audit dependencies and update to version 2.0.8 or revert to 2.0.4. → wiz.io |
| 2026-06-19 2026 | npm v12’s Biggest Security Change: From Implicit to Explicit Trust intermediate 11 min read | Library introducing explicit trust for npm package installations in v12, blocking script execution, Git repositories, and remote URLs by default, requiring explicit approval. This change directly addresses common malware delivery mechanisms exploited in campaigns like Shai-Hulud variants and easy-day-js, which leveraged lifecycle scripts, Git dependencies, and remote URLs to steal credentials and compromise developer environments. → jfrog.com |
| 2026-06-18 2026 | Supply-chain malware is evolving into self-propagating worms news 4 min read | Library catalog entries for Shai-Hulud demonstrate how supply-chain malware has evolved into self-propagating worms that exploit developer workflows. This new class of malware, unlike traditional single-point compromises, automates credential theft, package infection, and republishing across ecosystems like npm, PyPI, and GitHub. This worm-like behavior turns dependency chains into active propagation mechanisms, posing significant risks by extending compromises into CI/CD pipelines and cloud services, necessitating robust security measures such as securing developer environments, tightening credential management, strengthening dependency controls, and improving pipeline visibility. |
| 2026-06-18 2026 | From package to postinstall payload: Inside the Mastra npm supply chain compromise intermediate 9 min read | Library for analyzing the Mastra npm supply chain compromise, detailing the exploitation of the `ehindero` maintainer account to inject malicious `easy-day-js` package dependencies. This attack leveraged a postinstall hook to disable TLS certificate verification, download a second-stage payload, and execute it as a hidden process. The analysis covers the staged delivery, obfuscated dropper, C2 communication, and Windows-specific techniques like reflective .NET assembly injection and host fingerprinting for persistence and further exploitation. → microsoft.com |
| 2026-06-18 2026 | Ultralytics AI Library Hacked via GitHub for Cryptomining intermediate 4 min read Python | Library compromise targeting Ultralytics via GitHub Actions injected cryptomining malware into PyPI versions 8.3.41 and 8.3.42. Attackers exploited branch name vulnerabilities in pull requests to execute arbitrary code, modifying core library files to download and run XMRig. This supply chain attack highlights the risk of compromised CI/CD workflows, impacting downstream dependencies like the ComfyUI Impact Pack and affecting numerous cloud environments. → wiz.io |
| 2026-06-18 2026 | Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405) news 10 min read | Writeup detailing CVE-2024-43405, a critical signature verification bypass discovered in Nuclei, the popular open-source vulnerability scanner from ProjectDiscovery. This vulnerability, uncovered by Wiz, could enable arbitrary code execution by allowing malicious templates to bypass the existing signature verification mechanism, which relies on ASN.1 encoded ECDSA signatures. The bypass exploits subtle issues within the regex-based signature extraction and removal logic, potentially compromising systems running untrusted Nuclei templates. → wiz.io |
| 2026-06-18 2026 | Polyfill supply chain attack embeds malware in JavaScript CDN assets intermediate 7 min read | Library providing detection for the Polyfill supply chain attack impacting cdn.polyfill.io, which embedded malware in JavaScript assets. The attack, announced June 25, 2024, affected over 100,000 websites, including Intuit. Snyk Code's SAST engine can detect usage of malicious domains like polyfill[.]site, polyfill[.]com, bootcdn[.]net, and staticfile[.]net through custom rules, and has identified CVE-2024-38526 in the pdoc library. → snyk.io |
| 2026-06-18 2026 | A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope intermediate 9 min read | Writeup detailing a supply chain attack on the `@mastra` npm scope, where a former contributor's compromised account was used to republish 142 packages with a malicious dependency, `easy-day-js`. This dependency, a `dayjs` imposter, featured an install hook that disabled TLS verification, downloaded a cross-platform cryptocurrency stealer and remote access trojan, and established persistence. The attack exploited lax scope access management by npm and highlights the risks of unrevoked permissions and dependency confusion via version ranges. → snyk.io |
| 2026-06-18 2026 | Over 140 popular Mastra npm Packages Hit by Supply Chain Attack news 3 min read | Writeup detailing the @mastra npm supply chain attack, where 141 packages were compromised via a malicious dependency, `easy-day-js`. The attack leveraged `postinstall` scripts to download and execute obfuscated payloads from C2 servers, targeting crypto wallet extensions. This mirrors the `axios` compromise, employing similar tactics like staged malicious versions and self-deleting scripts to evade detection. → aikido.dev |