The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-06-11 2026 | CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild news 13 min read RCE | Tool that exploits CodeBuild misconfigurations to hijack AWS GitHub repositories, including the JavaScript SDK powering the AWS Console. The vulnerability arose from unanchored regex patterns in CodeBuild's ACTOR_ID filter, allowing attackers to register GitHub user IDs that contained pre-existing approved IDs, thus bypassing the filter and triggering builds with malicious code. This technique is similar to attacks seen against the Nx S1ngularity project and the Amazon Q VS Code extension. → wiz.io |
| 2026-06-11 2026 | Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure news 6 min read | Framework for modeling and mitigating SDLC infrastructure attacks, SITF categorizes over 70 techniques across Endpoint/IDE, VCS, CI/CD, Registry, and Production pillars. It visualizes attack flows, decomposes events into Risk -> Technique -> Control causal chains, and provides a controls matrix prioritized by attack stage. SITF was developed in response to escalating attacks like Ultralytics hijack, Shai-Hulud, and TrustWallet compromise, addressing gaps in existing frameworks like MITRE ATT&CK and OWASP CI/CD Top 10 for infrastructure-centric threat modeling. → wiz.io |
| 2026-06-11 2026 | What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security beginner 3 min read AI | Talk slides from DevSecCon2025 address AI security, focusing on the vulnerabilities introduced by agentic AI in software development pipelines. The session highlights the risk of supply chain attacks via MCP servers and agents, using an example where an Org Admin Token was inadvertently used for authentication instead of a read-only token, demonstrating a critical security oversight. Attendees will learn strategies for securing these new AI tools and gain an understanding that AI in pipelines demands the same rigorous security as traditional code. → snyk.io |
| 2026-06-11 2026 | npm Supply Chain Attack via Open Source maintainer compromise news 3 min read Secrets | Writeup of an npm supply chain attack where a maintainer of popular packages was compromised via phishing. The attacker gained control of the npm account and published malicious versions of packages, targeting crypto transactions by intercepting and modifying ETH values and swap/transfer requests. Affected packages and versions were identified, and a Sindre Sorhus script was provided for checking dependency trees. → snyk.io |
| 2026-06-11 2026 | Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack news 5 min read Secrets | Analysis of the "Shai-Hulud" npm supply chain attack reveals widespread compromise of packages like `@ctrl/tinycolor` and `ngx-bootstrap`. This worm-like malware targets cloud credentials, API keys, and CI/CD environments via malicious `postinstall` scripts embedded in compromised packages, exfiltrating secrets through webhooks and GitHub Actions. The attack affected multiple package namespaces and versions, necessitating comprehensive credential rotation and system audits for affected hosts. → snyk.io |
| 2026-06-11 2026 | Malicious MCP Server on npm postmark-mcp Harvests Emails news 4 min read | Library for detecting malicious npm packages, specifically highlighting the `postmark-mcp` package which was modified to exfiltrate email contents via a blind-copy (BCC) to an external domain. This supply chain attack targeted an MCP server, potentially exposing sensitive data and leading to follow-on compromises. Immediate mitigation includes uninstalling the package, rotating credentials, and blocking the reported exfiltration domain. The companion `mcp-scan` tool is recommended for identifying such risks. → snyk.io |
| 2026-06-11 2026 | Phishing Campaign Leveraging the NPM Ecosystem news 4 min read | Library of obfuscated JavaScript payloads and HTML lure files used in a phishing campaign that weaponized the npm ecosystem and the unpkg.com CDN. The attack involved publishing over 175 npm packages with names like `redirect-[a-z0-9]{6}` and a separate cluster using `mad-x.x.x.x.x.x` names. These packages, served via unpkg.com, redirected victims to credential-harvesting sites after opening crafted HTML "business documents," targeting enterprise employees primarily in Europe. → snyk.io |
| 2026-06-11 2026 | Compromised Rust crate onering performs code exfiltration news 3 min read Secrets | Writeup detailing a malicious Rust crate, "onering" version 1.4.1, which exfiltrates source code via a compromised `build.rs` script. This script collects Git commit metadata and diffs, disguises them as Sentry telemetry, and sends them to a Sentry ingest endpoint. The compromise affects both the crates.io package and the maintainer's GitHub repository, highlighting a growing trend of build-time payload execution in the Rust supply chain. → aikido.dev |
| 2026-06-11 2026 | The Governance Gap: What IDC’s 2026 Data Reveals About AI and the Software Supply Chain beginner 3 min read AI | Survey of AI governance challenges within the software supply chain, highlighting IDC's 2026 data revealing AI adoption outpaces governance readiness. The report details the rise of "Shadow AI" and the misconception that AI agents can self-police compliance, leading to risks like vulnerable open-source dependencies from npm or PyPI. The solution lies in building platform-level guardrails within the software supply chain to manage AI adoption safely. → jfrog.com |
| 2026-06-10 2026 | The Miasma worm source code briefly leaked on GitHub news 2 min read | Analysis of Miasma, a credential-stealing attack framework that evolved from the Shai-Hulud worm, details its self-propagating supply-chain attacks. This framework, briefly leaked on GitHub, targets developer machines and cloud credentials to compromise repositories, packages, and AI coding tools like Claude and Copilot. It leverages GitHub for command-and-control, employs advanced multi-stage payload obfuscation, and includes a destructive "dead-man switch" that wipes user files if stolen tokens are revoked. The leak is expected to accelerate adoption and evolution of similar attack techniques. → bleepingcomputer.com |
| 2026-06-10 2026 | GitHub announces npm security changes to tackle supply-chain attacks news 2 min read | Library announces security changes in npm v12 to combat supply-chain attacks, mandating explicit approval for execution of pre/postinstall scripts, native module builds, and prepare scripts from Git/local/linked dependencies. It will also require explicit permission for fetching dependencies from Git repositories and remote URLs, disrupting techniques used in attacks like Shai-Hulud and those targeting eslint-config-prettier and Toptal's Picasso packages. Developers can prepare by upgrading to npm 11.16.0 for warnings on upcoming breaking changes. → bleepingcomputer.com |
| 2026-06-10 2026 | JFrog and Anthropic Bring Enterprise-Grade Software Supply Chain Governance and Security to Claude Code beginner | JFrog and Anthropic are collaborating to enhance the security and governance of software supply chains for Anthropic's Claude code. This partnership integrates JFrog's Artifactory and Xray solutions with Claude, an AI model designed for enterprise-level code assistance. The goal is to provide developers with AI-generated code that is both secure and compliant, addressing critical supply chain risks. This integration aims to ensure that code developed with Claude meets enterprise security standards and governance requirements from the outset. |
| 2026-06-10 2026 | JFrog and Anthropic Bring Enterprise-Grade Software Supply Chain Governance and Security to Claude Code beginner 5 min read | Plugin for Claude Code, this JFrog Platform extension enables enterprise-grade software supply chain governance for AI coding agents. It provides real-time upstream governance, enforces policies as code, and offers strengthened auditability by managing over 18 billion artifacts. The integration offers JFrog Platform Skills and MCP Tools for standardized access to security, compliance, and artifact data, supporting universal agent connectivity across environments like Cursor and VS Code Copilot. |
| 2026-06-10 2026 | JFrog and Anthropic Bring Enterprise-Grade Software Supply Chain Governance and Security to Claude Code beginner 5 min read | Library integrating JFrog Platform with Anthropic Claude Code, enabling enterprise-grade software supply chain governance for AI coding agents. This solution provides real-time upstream governance, MCP and agent skills governance, accelerated DevOps workflows, and strengthened auditability. It supports universal agent connectivity through JFrog Platform Skills and MCP Tools, allowing agents to perform operations like vulnerability scanning and provenance verification within their native environments, starting with Claude Code, Cursor, and VS Code Copilot. |
| 2026-06-10 2026 | Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack news 5 min read | Library. This entry details the "TeamPCP" supply chain attack that compromised Aqua Security's Trivy vulnerability scanner and related GitHub Actions. The attack involved injecting credential-stealing malware into official releases and workflows, leading to the exfiltration of secrets via typosquatted domains and fallback repository mechanisms. Threat actors also leveraged stolen publish tokens for npm ecosystem compromise and deployed iterative payloads. Organizations should audit Trivy versions and GitHub Action references, and consider pinning actions to full SHA hashes for long-term hardening. → wiz.io |
| 2026-06-10 2026 | KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack news 7 min read Secrets | Writeup detailing a supply chain attack on the Checkmarx KICS GitHub Action by TeamPCP, compromising 35 tags and distributing credential-stealing malware via a `setup.sh` script. The attack, similar to the Trivy incident, leverages compromised identities and hardcoded RSA keys, with a new Kubernetes persistence mechanism for follow-on operations. The malware exfiltrates secrets from environment variables, runner memory, AWS metadata, and Kubernetes API, encrypting them and uploading them to GitHub repositories or attacker-controlled domains. → wiz.io |
| 2026-06-10 2026 | Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign news 3 min read Python Secrets | Writeup detailing the TeamPCP trojanization of LiteLLM versions 1.82.7 and 1.82.8. These malicious packages leveraged Python's `.pth` mechanism for stealthy persistence, exfiltrating cloud credentials, CI/CD secrets, and API keys to attacker-controlled domains. This attack follows TeamPCP's prior compromises of Aqua Security's Trivy and Checkmarx GitHub Actions, highlighting a broader supply chain attack campaign. → wiz.io |
| 2026-06-10 2026 | Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wild intermediate 5 min read Secrets | Analysis of TeamPCP supply chain attacks, including compromises of Trivy, KICS, and LiteLLM. The campaign deploys malware that harvests cloud credentials and secrets, using tools like TruffleHog for validation. Post-compromise activities involve extensive enumeration of AWS services, abuse of GitHub workflows (potentially via Nord Stream), and ECS Exec for code execution and data exfiltration. The threat actor prioritizes speed and volume, utilizing Mullvad VPN and InterServer hosts. → wiz.io |
| 2026-06-10 2026 | Axios NPM Distribution Compromised in Supply Chain Attack news 2 min read | Analysis of the Axios NPM supply chain attack, where compromised maintainer accounts led to malicious versions (v1.14.1, v0.30.4) introducing the `plain-crypto-js` dependency. This attack, tracked as GHSA-fw8c-xr5c-95f9 and MAL-2026-2306, involved payloads downloading RATs from sfrclak.com:8000, capable of remote shell execution and system reconnaissance across macOS, Windows, and Linux. → wiz.io |
| 2026-06-10 2026 | SHA1-Hulud, npm supply chain incident news 3 min read | Writeup of the SHA1-Hulud npm supply chain incident, a worm that infiltrates npm packages with hidden preinstall scripts. This advanced second wave of the Shai-Hulud attack targets developers and CI systems, deploying payloads that turn compromised machines into attacker-controlled GitHub Actions runners. It silently injects malicious workflows, exfiltrates GitHub and npm secrets, and harvests cloud credentials from AWS, Azure, and GCP, enabling remote command execution and broad system compromise. Some variants include destructive wiper capabilities. → snyk.io |
| 2026-06-10 2026 | How Snyk Helps Federal Agencies Prepare for the Genesis Mission Era of AI-Driven Science beginner 3 min read AI | Library for securing software supply chains and AI/ML workflows, enabling federal agencies to align with Secure by Design principles for the Genesis Mission. It provides visibility into open source components, container images, and IaC templates, integrating security into CI/CD pipelines, cloud infrastructure, and research platforms. Snyk aids in identifying vulnerabilities, enforcing policies, generating SBOMs, and meeting federal cybersecurity expectations like NIST 800-218 and EO 14028, accelerating scientific discovery without compromising trust. → snyk.io |
| 2026-06-10 2026 | Evo Adds CycloneDX Support to Give Full AI Visibility beginner 4 min read AI | Library that adds CycloneDX support for AI ModelCards, enabling the generation of AI Bill of Materials (AI-BOMs). This integration provides enterprises with machine-readable inventories that track model dependencies, provenance, licensing, architecture (e.g., transformer, CNN), task domain, input/output formats, and learning approach (e.g., supervised, self-supervised), enhancing visibility and governance for AI supply chain risks. → snyk.io |
| 2026-06-10 2026 | The Holiday Whisper: Shai-Hulud 3.0 news 3 min read | Analysis of Shai-Hulud 3.0, also known as "The Golden Path," reveals an evolved malware variant discovered in the `@vietmoney/react-big-calendar` npm package (version 0.26.2). This iteration focuses on stealth and cross-platform compatibility, refining its logic and re-obfuscating code from source to evade detection. Key technical details include targeted exfiltration to GitHub repositories with a specific description and improved error handling. Attackers are leveraging the holiday period and a transition to "trusted publishing" in the npm ecosystem. Recommended actions focus on structural hardening, such as disabling lifecycle scripts, enforcing lockfile-only installs, implementing cooldown periods for package adoption, and auditing outbound egress. → snyk.io |
| 2026-06-10 2026 | Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem) intermediate 5 min read | Library offering a multi-layered defense strategy for software supply chains, inspired by the Shai-Hulud npm incident. It focuses on proactive prevention with features like Snyk Studio for AI-assisted secure coding, a 21-day dependency upgrade cooldown, and Package Health Intelligence. Detection mechanisms include proactive retesting and shift-left defense with Snyk CLI. Remediation is facilitated by assessing risk exposure, zero-day visibility, and workflow automation for ticket creation, ensuring organizations can react to emerging threats like compromised credentials and malicious exfiltration scripts. → snyk.io |
| 2026-06-10 2026 | OWASP Dependency-Track 5.0 Is Now Generally Available news 5 min read | Library for software supply chain integrity verification, OWASP Dependency-Track 5.0 introduces horizontal scaling, active/active high availability, and processing that survives crashes. It now flags components with mismatched published hashes to catch typosquatting and registry tampering, employs an expression-based policy engine using Common Expression Language (CEL) for sophisticated component and vulnerability auditing, and standardizes on PostgreSQL for a single database engine. This release supports larger portfolios and higher throughput, making it suitable for enterprise-scale compliance with regulations like the EU Cyber Resilience Act. → owasp.org |
| 2026-06-10 2026 | Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System advanced 15 min read RCE | Library for analyzing `binding.gyp` files, highlighting how this npm build system, invoked by `node-gyp`, can be abused to execute arbitrary code during package installation. It details the `<!(...)` command expansion syntax used in `binding.gyp` for executing shell commands and the subsequent sandbox escape vulnerability allowing arbitrary Python code execution via `eval()`, as demonstrated by the Miasma attack which targeted numerous npm packages. → aikido.dev |
| 2026-06-10 2026 | The Cairn Nobody Tends: Open-Source Dependencies Unmaintained Code and the Supply-Chain Failures beginner | This article, "The Cairn Nobody Tends," highlights the significant risks posed by unmaintained open-source dependencies within software supply chains. These neglected projects, often created by hobbyists or those who have moved on, become vulnerabilities. Attackers can exploit these unpatched weaknesses, leading to widespread security failures across the applications that rely on them. The title metaphor suggests these dependencies are like unattended cairns on a trail—once useful landmarks, now overgrown and potentially dangerous if not maintained. → hackernoon.com |
| 2026-06-09 2026 | Microsoft removes GitHub projects after malware compromise news 2 min read | Library repositories for Microsoft AI coding tools, including those used with Claude Code, Gemini CLI, and Visual Studio Code, were temporarily removed from GitHub after the discovery of malicious code designed to steal credentials. This software supply-chain attack, flagged by Cloudsmith and OpenSourceMalware, affected at least 70 Microsoft projects, some of which had been restored after review. The incident highlights the risks of compromised open-source projects, echoing a previous compromise of Microsoft's Durable Task project. |
| 2026-06-09 2026 | Active Exploitation Alert: Shai-Hulud Supply Chain Attack Compromises 100 NPM and PyPI Packages with Self-Spreading Malware news 4 min read | Library for detecting and mitigating the Shai-Hulud supply chain attack, which compromised over 100 NPM and PyPI packages like those from TanStack and UiPath. The campaign, attributed to TeamPCP, uses self-spreading malware to exfiltrate credentials, install persistence mechanisms via IDE hooks and OS services, and features a destructive wipe routine triggered by token revocation. The library details TTPs including memory scraping, multi-layered obfuscation, and GitHub GraphQL API exfiltration. → rescana.com |
| 2026-06-09 2026 | Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign news 7 min read | Analysis of the prt-scan campaign details an AI-powered actor exploiting GitHub's pull_request_target workflow trigger. The attacker opened over 500 malicious PRs across six waves, compromising at least two npm packages. Payloads evolved from bash scripts to AI-generated, language-aware wrappers, attempting to steal GitHub tokens, enumerate secrets, and exfiltrate credentials. Despite elaborate multi-phase payloads, the attack revealed fundamental misunderstandings of GitHub's threat model, limiting overall success but highlighting the growing threat of AI-assisted supply chain attacks. → wiz.io |
| 2026-06-09 2026 | Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2) beginner 8 min read Recon | Library detailing GitHub Actions security, covering threat models, risks like pull request pwnage and script injection, and defensive playbooks. It analyzes dangerous triggers such as `pull_request_target`, explaining how vulnerabilities in these can lead to compromises like the Trivy supply chain breach, and offers mitigation strategies. → wiz.io |
| 2026-06-09 2026 | How to Harden GitHub Actions: An Updated Guide intermediate 13 min read Recon | Library for hardening GitHub Actions, this updated guide details how to mitigate risks demonstrated by incidents like tj-actions, TeamPCP/Trivy-action, and Axios. It covers organization-level administrative settings such as read-only workflow permissions and limiting actions to verified creators or an allowlist with SHA pinning. The guide also discusses branch protection, secrets management with repository, organization, and environment-level secrets, and the importance of immutable releases for action maintainers. → wiz.io |
| 2026-06-09 2026 | From Code to Pipeline: Wiz Code Now Secures Your Build Environment beginner 7 min read | Library for securing CI/CD pipelines, Wiz Code now detects risks associated with AI agents, including prompt injection vulnerabilities in platforms like GitHub Actions. It models workflows, jobs, and runners, identifying dangerous triggers like `pull_request_target` and excessive permissions. The library extends composition analysis to CI, providing a CI-BOM for third-party actions and associating audit log events with specific pipeline contexts to offer unified visibility into traditional misconfigurations and AI-driven threats. → wiz.io |
| 2026-06-09 2026 | Context.ai OAuth Token Compromise news 4 min read AuthN | Analysis of the Context.ai OAuth Token Compromise highlights a supply chain attack vector where compromised tokens for the AI tool enabled access to downstream SaaS platforms like Vercel. Attackers leveraged broad OAuth permissions to access Google Workspace, exemplifying a broader trend of abusing trusted third-party integrations. The analysis details detection methods across Google Workspace, Azure AD, and Okta, alongside investigation steps for affected accounts and user activity, and emphasizes revoking access and rotating credentials to mitigate risks. → wiz.io |
| 2026-06-09 2026 | Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware news 5 min read Secrets | Library for detecting supply chain attacks targeting SAP npm packages, specifically the "Mini Shai Hulud" campaign by TeamPCP. It details how malicious preinstall scripts in packages like `@cap-js/sqlite` and `@cap-js/postgres` execute obfuscated payloads. These payloads steal credentials from developer environments and CI/CD pipelines, targeting GitHub, npm, cloud providers, Kubernetes, and HashiCorp Vault. Exfiltration occurs via attacker-controlled GitHub repositories, with fallback mechanisms leveraging specific commit messages and GitHub GraphQL API. The malware also includes browser credential theft and propagation logic, with a region guardrail that terminates execution on Russian systems. → wiz.io |
| 2026-06-09 2026 | The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2) intermediate 8 min read AI | Analysis of AI-powered GitHub Actions reveals critical vulnerabilities, including bypassed permission checks that allow external attackers to trigger AI execution and a novel secret exfiltration vector targeting dynamically created credential files. Popular actions like `anthropics/claude-code-action` and `google-github-actions/run-gemini-cli` were found to have misconfigurations, potentially affecting numerous high-star repositories. Techniques like "Dangling GitHub Apps" and "Dependabot Deputy Confusion Injection" highlight the risks associated with naive string-based permission validation and the manipulation of trusted bot identities. → wiz.io |
| 2026-06-09 2026 | How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware news 5 min read AI | Library for securing AI agent skills; detects malicious instructions in SKILL.md files, preventing attacks like the OpenClaw "google-qx4" skill which tricked users into downloading malware. It addresses vulnerabilities in AI supply chains, specifically targeting agent-driven social engineering, and offers solutions like Evo by Snyk and mcp-scan to monitor agent behavior and uncover hidden AI components. → snyk.io |
| 2026-06-09 2026 | Why Your “Skill Scanner” Is Just False Security (and Maybe Malware) news 6 min read AI | Library for AI agent security scanning, focusing on the limitations of regex-based tools like SkillGuard, Skill Defender, and Agent Tinman against nuanced threats such as prompt injection and obfuscated payloads. It highlights the inadequacy of pattern matching for natural language and advocates for AI-native approaches, referencing the `mcp-scan` tool from Snyk's Evo platform for intent analysis and behavioral assessment of `SKILL.md` files. → snyk.io |
| 2026-06-09 2026 | Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain intermediate 8 min read AI | Library integrating Snyk's security intelligence into Vercel's skills.sh marketplace, auditing AI agent skills for vulnerabilities like prompt injection and "toxic flows" using LLM-based judges and deterministic rules. The system analyzes both execution logic and natural language instructions, providing a "Security Verified" badge and continuously re-evaluating skills to mitigate supply chain risks in the rapidly growing agent ecosystem. → snyk.io |
| 2026-06-09 2026 | How “Clinejection” Turned an AI Bot into a Supply Chain Attack advanced 9 min read AI | Analysis of the "Clinejection" vulnerability chain details how an AI bot in the Cline repository was exploited via indirect prompt injection and GitHub Actions cache poisoning to facilitate a supply chain attack. This attack, discovered by Adnan Khan and later exploited by an unknown actor, leveraged a GitHub issue to trick the AI triage bot into executing malicious code from a compromised commit. The attacker then used cache poisoning with the Cacheract tool to gain access to production credentials, ultimately publishing a malicious version of the Cline CLI to npm, which installed the OpenClaw AI agent. → snyk.io |
| 2026-06-09 2026 | The 89% Problem: How LLMs Are Resurrecting the "Dormant Majority" of Open Source beginner 6 min read | Database of package health data that bridges the gap between open source intelligence and package health, providing developers and AI agents with data points on security, popularity, maintenance, and community engagement. This database helps identify risks associated with the "Dormant Majority" of abandoned open source projects, which AI systems may recommend due to training data biases. It aids in preventing insecure package selections, such as the archived `gorilla/sessions` package, and mitigates risks like AI package hallucinations and slopsquatting by enforcing dependency safety at introduction. → snyk.io |
| 2026-06-09 2026 | How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM news 9 min read Python RCE | Toolkits and writeups detail the compromise of the LiteLLM Python package on PyPI, where versions 1.82.7 and 1.82.8 were found to contain malicious code. This incident, tracked by Snyk as SNYK-PYTHON-LITELLM-15762713, resulted from a supply chain attack originating with a compromised Trivy security scanner. The attack leveraged a .pth file mechanism for execution and involved multi-stage data collection, AES-256 and RSA encryption, exfiltration to `models.litellm.cloud`, and persistence via systemd user services and Kubernetes lateral movement. The threat actor, TeamPCP, utilized consistent infrastructure across this and prior attacks on Trivy and Checkmarx KICS. → snyk.io |
| 2026-06-09 2026 | Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT news 7 min read RCE | Library versions 1.14.1 and 0.30.4 of the popular Axios npm package were briefly compromised, allowing a supply chain attack to deliver a cross-platform RAT. The malicious versions added a hidden dependency, plain-crypto-js@4.2.1, which executed a double-obfuscated dropper script during installation. This script detected the OS, downloaded platform-specific RAT payloads, and then self-erased, leaving minimal traces. The attack targeted systems that ran `npm install` within a two-hour window on March 31, 2026, and also affected packages `@qqbrowser/openclaw-qbot` and `@shadanai/openclaw`. → snyk.io |
| 2026-06-09 2026 | Thwarting the Cybercriminals Targeting Your Service Supply Chain news 5 min read | Library for securing service supply chains, addressing threats beyond traditional hardware and software vulnerabilities. It highlights how attackers exploit trusted service relationships, referencing incidents at M&S and Co-op. The library also covers the risks introduced by agentic AI, such as custom, third-party, and hybrid AI solutions, and advocates for continuous security practices and thorough vetting of service providers to mitigate these evolving threats. |
| 2026-06-08 2026 | Practical Package Security: The Unofficial Guide beginner 6 min read | Guide on practical package security, this resource addresses risks in third-party package consumption. It details mitigations like minimizing dependencies, adopting cooldown periods for updates, utilizing lockfiles and hashes, employing wrapper tools, and restricting install-time execution. Organizational controls include protecting execution environments with remote developer environments and zero trust production, and controlling installations via registry pull-through proxies or curated registries. Examples like TeamPCP / Trivy-action and Axios supply chain compromises highlight the urgency of these practices. → wiz.io |
| 2026-06-08 2026 | The Jenkins Threat Landscape intermediate 7 min read | Library that details the Jenkins threat landscape, focusing on core vulnerabilities, the plugin ecosystem, and common misconfigurations. It highlights that most compromises exploit insecure usage patterns and weak access controls, rather than novel software flaws. Observed attack flows leverage exposed Jenkins instances for script execution, abuse CI/CD pipelines for secret extraction, and exploit plugin/core vulnerabilities, often chaining these techniques for broad environment compromise. → wiz.io |
| 2026-06-08 2026 | Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised news | The Mini Shai-Hulud campaign has compromised several npm packages, including those within the TanStack ecosystem. This latest supply chain attack specifically targets developer tooling. Security researchers are advising developers to detect and mitigate these malicious packages to protect against potential threats. → wiz.io |
| 2026-06-08 2026 | The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave news 2 min read Secrets | Analysis of the "MiniShaiHulud" campaign details a sophisticated software supply chain attack attributed to "TeamPCP." The campaign targeted npm packages, GitHub Actions, and a VSCode extension, with malware designed to steal credentials like GitHub tokens and SSH keys, and establish persistence via a Python backdoor. Malicious payloads were concealed in orphaned GitHub commits, and exfiltration occurred through attacker-generated repositories with the description "niagA oG eW ereH :duluH-iahS." The backdoor communicates using the trigger "firedalazer." → wiz.io |
| 2026-06-08 2026 | durabletask: TeamPCP's Latest PyPi Compromise news 2 min read Python | Writeup of the durabletask supply chain attack, where malicious versions 1.4.1, 1.4.2, and 1.4.3 of the Microsoft Python client were published to PyPi via a compromised GitHub account. The attack leveraged dumped GitHub secrets to obtain a PyPi token, enabling the release of compromised packages. Wiz recommends immediate identification of exposure by searching for specific filenames and infection markers, rotating all credentials, auditing AWS SSM and Kubernetes logs, checking password manager sessions, and blocking C2 infrastructure. → wiz.io |
| 2026-06-08 2026 | Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure news 13 min read | Writeup on JINX-0164, a threat actor targeting cryptocurrency organizations with social engineering via LinkedIn, custom macOS malware like AUDIOFIX, and CI/CD infrastructure hijacking. The actor leverages credential theft from endpoints, impersonates developers in Git commits, and injects malicious code into repositories to achieve lateral movement and execute supply chain attacks, such as with the `@velora-dex/sdk` package on npm. → wiz.io |