The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-06-08 2026 | Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers news 8 min read Secrets | Library for detecting and mitigating supply chain attacks, exemplified by the malicious elementary-data PyPI package compromise. The attack vector exploited a GitHub Actions script injection flaw to publish a credential-stealing package containing a disguised Python `.pth` file. This payload harvested sensitive data including cloud credentials (AWS, GCP, Azure), SSH keys, container secrets, cryptocurrency wallets, and system files, exfiltrating them to a C2 server. → snyk.io |
| 2026-06-08 2026 | "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages news 13 min read Secrets | Analysis of the "Mini Shai-Hulud" campaign targeting SAP's npm packages, including `@cap-js/db-service`, `@cap-js/sqlite`, `@cap-js/postgres`, and `mbt`. Attackers published malicious versions that utilized the Bun runtime to execute an obfuscated credential stealer, with observed self-propagation code and the ability to hijack CI pipelines. This campaign builds upon previous Shai-Hulud incidents, focusing on credential theft and persistence injection. → snyk.io |
| 2026-06-08 2026 | lightning PyPI Compromise: A Bun-Based Credential Stealer in Python news 11 min read Secrets | Library compromised with malicious versions of `lightning` (2.6.2, 2.6.3) that download and execute a Bun-based credential stealer. This loader uses obfuscated JavaScript, similar to a prior npm campaign, and harvests tokens from GitHub, npm, and cloud metadata services. It also attempts repository poisoning via GitHub GraphQL mutations and self-propagation on npm. Snyk has published advisory SNYK-PYTHON-LIGHTNING-16323121 for this CWE-506 (Embedded Malicious Code) incident. → snyk.io |
| 2026-06-08 2026 | TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack news 12 min read Secrets | Analysis of CVE-2026-45321, detailing the Mini Shai-Hulud supply chain attack that compromised TanStack npm packages. The incident involved three chained vulnerabilities: a "Pwn Request" via `pull_request_target` exploiting TanStack's bundle-size workflow, GitHub Actions cache poisoning of the pnpm package store, and OIDC token extraction from runner memory to publish malicious packages with valid SLSA provenance. This attack, attributed to TeamPCP, marks the first documented instance of malicious npm packages achieving indistinguishable provenance. → snyk.io |
| 2026-06-08 2026 | Malicious node-ipc versions published to npm in suspected maintainer account compromise news 6 min read | Library detailing the compromise of node-ipc npm package versions 9.1.6, 9.2.3, and 12.0.1, which contained an obfuscated credential-stealing payload. The attack likely involved abusing a legitimate npm maintainer account, potentially through expired domain takeover and account recovery, rather than a CI/CD pipeline breach. The payload targets over 90 credential categories, including cloud, SSH, and Kubernetes secrets, exfiltrating data to attacker-controlled infrastructure. Organizations are advised to identify and remove affected versions, rotate exposed secrets, and harden their package consumption practices. → snyk.io |
| 2026-06-08 2026 | Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account news 8 min read | Library of malicious npm packages distributed via the Mini Shai-Hulud campaign targeted the AntV data visualization ecosystem, involving over 300 compromised package versions. The attack leveraged a compromised maintainer account to inject obfuscated Bun JavaScript payloads triggered by `preinstall` hooks. These payloads harvest developer secrets and cloud credentials from AWS, GCP, Azure, GitHub, and others, establish C2 persistence through various mechanisms including IDE hooks and OS daemons, and attempt self-propagation using stolen npm tokens. The campaign also utilized orphan commits and Sigstore to forge build provenance, deceiving security tools. → snyk.io |
| 2026-06-08 2026 | The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised news 2 min read | Library compromise affecting Microsoft's `durabletask` Python package on PyPI, identified as SNYK-PYTHON-DURABLETASK-16761538, features a malicious payload including an infostealer targeting Linux systems, a worm for propagation, and a disk wiper. This incident is linked to the broader AntV Shai Hulud supply chain campaign, with threat actors expanding their targeting to include packages associated with major technology companies. Developers should verify their `durabletask` version and scan projects with Snyk. → snyk.io |
| 2026-06-08 2026 | Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future news 3 min read AI | Library for embedding application security within AI-driven development workflows. It details Snyk's integration with partners like Anthropic, Cursor, AWS, Atlassian, and OpenAI to govern AI-generated code. The entry highlights Snyk's Partner Services Delivery Program and Partner Accelerator Fund, designed to help partners build high-margin professional services around the Snyk AI Security Platform, enabling them to offer implementation, integration, and remediation services for AI/AppSec maturity. → snyk.io |
| 2026-06-08 2026 | Laravel Lang Supply Chain Advisory news 8 min read | Library of compromised Laravel localization packages on Packagist, specifically those under the `laravel-lang` namespace. An attacker used a leaked GitHub PAT to republish over 700 historical versions with a malicious `helpers.php` file. This file, registered in `autoload.files`, executed on every PHP request, fetching a second-stage payload from `flipboxstudio.info` that steals cloud keys, Kubernetes and Vault secrets, CI/CD tokens, SSH material, environment files, browser data, password manager vaults, crypto wallets, and messaging tokens. Affected environments should be treated as compromised until proven otherwise. → snyk.io |
| 2026-06-08 2026 | How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development intermediate 7 min read AI | Library integrating Snyk into GitHub Copilot enables Relay Network to achieve secure-at-inception development. This approach embeds security findings and remediation directly into the coding workflow, reducing delays and allowing developers to fix vulnerabilities in real-time before committing code. Custom pre-commit hooks further enhance this by scanning all newly introduced code, facilitating rapid adoption and dramatically lowering Mean Time To Remediate (MTTR) for critical issues. → snyk.io |
| 2026-06-08 2026 | Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages news 7 min read | Analysis of the Miasma supply chain attack details malicious code embedded in at least 32 @redhat-cloud-services npm packages, impacting the Red Hat Hybrid Cloud Console. The compromised releases feature a preinstall script that executes an obfuscated payload, harvesting developer and cloud credentials and attempting to self-propagate. The campaign utilizes a worm-like descendant of the (Mini) Shai-Hulud framework, targeting GCP and Azure identities. The root cause involves a compromised Red Hat employee GitHub account pushing malicious commits, bypassing code review and generating packages with valid SLSA provenance. → snyk.io |
| 2026-06-08 2026 | Miasma: Supply Chain Attack Targeting RedHat npm Packages news 3 min read | Analysis of the Miasma campaign reveals a supply chain attack targeting @redhat-cloud-services npm packages, with over 32 releases containing unauthorized modifications. The malware, derived from TeamPCP's Mini Shai-Hulud, uses obfuscated JavaScript payloads and installation-time execution via preinstall scripts. It focuses on extracting cloud identities from GCP and Azure, generating unique encrypted payloads per infection, and was injected via a compromised Red Hat employee GitHub account. Security teams should investigate developer environments, audit for affected packages and GitHub Actions, rotate credentials, and strengthen supply chain defenses through allowlisting, SBOM generation, and improved monitoring. → wiz.io |
| 2026-06-08 2026 | Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp news 10 min read RCE | Library for detecting the Node-gyp Supply Chain Compromise, a self-propagating npm worm that exploits `binding.gyp` files for install-time code execution. This worm, classified as Embedded Malicious Code at Critical severity, harvests developer and CI/CD credentials across multiple cloud providers and password managers, exfiltrates them via GitHub repositories, and uses GitHub Actions for persistence, as reported by Snyk and StepSecurity who named the technique "Phantom Gyp" and the campaign "Miasma." → snyk.io |
| 2026-06-08 2026 | [tl;dr sec] #327 - Finding Zero-days with Any Model, Practical Package Security, Measuring the AI Offense-Defense Gap beginner 15 min read AI | Library for finding vulnerabilities in codebases, deepsec employs AI coding agents like Claude Opus 4.7 and GPT-5.5, running on user infrastructure. It conducts regex sweeps, traces data flows, and assesses severity with a refusal-detection classifier, reducing false positives through a revalidation step and offering plugin system for tuning and parallel execution. → tldrsec.com |
| 2026-06-08 2026 | Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm news 5 min read Secrets | Library detailing the compromise of 32 @redhat-cloud-services npm packages with Miasma, a credential-stealing worm variant similar to Mini Shai-Hulud. The attack exploited a compromised GitHub account to bypass npm's trusted publishing via GitHub Actions OIDC, injecting malicious `_index.js` payloads that steal cloud credentials, CI secrets, and SSH keys. This incident highlights vulnerabilities in CI/CD pipelines and the potential for open-sourced malware frameworks like Mini Shai-Hulud to be adapted by various threat actors. → aikido.dev |
| 2026-06-08 2026 | Why EDR and proxy won’t save you from supply chain malware intermediate 3 min read | Library for securing the developer supply chain, Aikido Device Protection operates directly on the machine to monitor package installation and runtime behavior. It addresses the critical gap left by traditional EDR and proxy solutions, which fail to detect malicious code embedded within trusted runtimes like npm or Python packages. Examples include post-install scripts stealing credentials or backdoored initialization files, bypassing standard security perimeters and process monitoring by mimicking legitimate operations. → aikido.dev |
| 2026-06-08 2026 | Introducing Package Traffic Controller: Software Supply Chain Security at the Network Edge beginner 4 min read | Library that enforces software supply chain security at the network edge. Package Traffic Controller intercepts all outbound package download requests, rerouting them transparently through Artifactory for inspection against security, license, and quality policies. This approach prevents shadow downloads from AI agents or other non-development users, ensuring compliance without disrupting developer workflows, and provides auditable logging of all artifact interactions. → jfrog.com |
| 2026-06-08 2026 | NVIDIA NIM Models Are Now Governed Assets in Your Supply Chain intermediate 5 min read AI | Library for integrating NVIDIA NIM models into your software supply chain. This solution allows governance, versioning, and security controls for NIM models, similar to other artifacts like Docker images and npm packages. It unifies discovery of AI assets from NVIDIA NIM and Hugging Face within a single catalog, enabling explicit allow/block policies and providing a comprehensive audit trail. The library streamlines the process of bringing models from NGC to production, ensuring compliance and security without creating separate registries or governance gaps. → jfrog.com |
| 2026-06-08 2026 | The npm Threat Landscape: Attack Surface and Mitigations (Updated June 2) news 27 min read | Library for monitoring npm supply chain attacks, detailing incidents like the Shai-Hulud worm, Mini Shai-Hulud campaigns, and the @redhat-cloud-services namespace compromise. It analyzes evolving adversary TTPs including wormable propagation, infrastructure-level persistence, and multi-stage payloads, offering remediation playbooks for credential rotation and dependency purging. The library highlights attacks against various ecosystems, including enterprise infrastructure, AI tooling, and specialized packages, emphasizing the weaponization of trust in modern software development. → unit42.paloaltonetworks.com |
| 2026-06-08 2026 | Securing the open source supply chain across GitHub intermediate 3 min read | Library for securing open source supply chains, focusing on GitHub Actions. It details how to enable CodeQL for workflow reviews, implement best practices like pinning third-party Actions to SHAs and avoiding `pull_request_target` triggers, and leverage OpenID Connect tokens for authorization instead of secrets. The library also highlights GitHub's partnership with OpenSSF for trusted publishing across npm, PyPI, NuGet, RubyGems, and Crates, and discusses ongoing efforts in malware detection and response to evolving threats like Shai-Hulud. → github.blog |
| 2026-06-08 2026 | We hardened zizmor's GitHub Actions static analyzer intermediate 4 min read Secrets | Library that hardened zizmor, a static analyzer for GitHub Actions workflows, by fixing parsing bugs related to YAML anchors and surfacing deserialization edge cases. This work addressed issues like malformed findings and silent data mishandling, improving zizmor's analysis of workflows from 6,612 high-value open-source repositories and aligning its expression evaluator with GitHub's test suite. The improvements enhance protection against supply-chain attacks, such as the aquasecurity/trivy-action exploit. → blog.trailofbits.com |
| 2026-06-08 2026 | RubyGems adds dependency cooldown to counter supply chain attacks news 14 min read | Library with support for dependency cooldowns, a feature designed to mitigate supply chain attacks by delaying the installation of newly released packages. This functionality, now integrated into RubyGems, mirrors similar implementations in the JavaScript (npm) and Python (pip, uv) ecosystems, as well as tools like Deno, Yarn, and Bun. Dependency cooldowns require packages to be a specified age (e.g., 7 days) before installation, providing time for security teams and maintainers to detect malicious versions. While disabled by default, this feature allows developers to enforce a delay, preventing immediate installation of potentially compromised code. |
| 2026-06-07 2026 | New Shai-Hulud Miasma Wave Hits Hundreds of npm Packages news 6 min read | Library of malicious npm package versions, part of the Shai-Hulud Miasma wave, abuses `binding.gyp` to execute payloads during `npm install`. These packages steal developer and CI/CD credentials, validate access, and self-propagate by publishing new malicious versions. Organizations that installed affected versions (tracked as sonatype-2026-003581) should treat impacted environments as compromised, rotate all credentials, and audit repositories for unauthorized changes. → sonatype.com |
| 2026-06-06 2026 | Node-gyp Supply Chain Compromise news 10 min read | Library for detecting and mitigating the Node-gyp Supply Chain Compromise, a self-propagating npm worm that abuses `binding.gyp` files for install-time code execution. This attack bypasses standard script-based security tooling by leveraging `node-gyp`'s configuration phase to run arbitrary commands, including a multi-stage Bun-based loader that harvests developer and CI/CD credentials from various cloud providers and password managers. The worm then exfiltrates these secrets and self-propagates by republishing compromised packages, as initially reported by StepSecurity with the "Phantom Gyp" technique and the "Miasma" campaign. → snyk.io |
| 2026-06-06 2026 | Patching fast and slow: Ruby devs delay to defend against supply chain attack news 1 min read | Library update from RubyGems introduces a cooldown feature for Bundler, adding a delay before installing recently updated packages. This defense mechanism combats software supply chain attacks by providing a window for identifying malicious code injected into Ruby gems before developers install them, with an option to override for critical patches. → csoonline.com |
| 2026-06-05 2026 | 600000 Monthly Downloads Affected: Miasma Supply Chain Attack Is Back on npm news 2 min read | Writeup of the Miasma supply chain attack, a Shai-Hulud variant targeting npm packages with over 600,000 monthly downloads. This multi-stage dropper bypasses `postinstall` logic by using a weaponized `binding.gyp` file to steal GitHub tokens, npm tokens, cloud credentials (AWS, GCP, Azure), and local environment information. The malware signature "Miasma – The Spreading Blight" was observed in over 118 infected GitHub repositories. → ox.security |
| 2026-06-05 2026 | IronWorm Supply Chain Malware Hits npm news | Library for analyzing supply chain attacks like IronWorm, a self-replicating Rust-built malware that infected 36 npm packages, targeting environment variables, cloud credentials, and crypto wallets. This campaign, detected by JFrog, utilized binary executables within postinstall scripts and spread by stealing credentials to publish new malicious packages, impacting over 32,000 monthly downloads. Actions include rotating keys and enabling 2FA. → ox.security |
| 2026-06-04 2026 | Software supply chain attacks: check your dependencies beginner 5 min read | Analysis of software supply chain attacks detailing how attackers compromise open-source packages, like those in Node.js, Rust, and Python ecosystems, to spread malware. It discusses techniques such as maintainer account compromise, abandoned package takeover, typosquatting, and self-propagation, and advises on identifying affected systems by reviewing dependencies, monitoring CI/CD activity, and scanning for known issues. Recommended mitigation steps include pausing automatic updates, manually approving new versions, rotating credentials, enforcing MFA, and strengthening development lifecycles. |
| 2026-06-03 2026 | Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign news 10 min read | Library for detecting the "Miasma" supply chain attack, which compromised 32 npm packages under the @redhat-cloud-services scope. The attack used obfuscated dropper scripts to download the Bun JavaScript runtime and steal credentials from GitHub, npm, AWS, Azure, GCP, HashiCorp Vault, and Kubernetes. It also attempted privilege escalation via passwordless sudo and self-propagation by publishing poisoned packages with forged SLSA provenance, and included a destructive tripwire to wipe the home directory. → microsoft.com |
| 2026-06-02 2026 | Claude Code GitHub Actions Flaw Created Supply Chain Attack Risk news 4 min read | Library components for Claude Code GitHub Actions were found to have vulnerabilities that could lead to supply chain attacks. These flaws allowed attackers to bypass permission controls and inject untrusted input into trusted workflows, potentially exposing sensitive credentials like GitHub Actions OIDC tokens. The most severe scenario could have introduced malicious code into Anthropic's own claude-code-action repository, impacting downstream users. Organizations should upgrade to the latest version and review workflow permissions to mitigate these risks. → esecurityplanet.com |
| 2026-06-02 2026 | Supply Chain Cyber Threats: How Malicious AI Puts Logistics Data at Risk news | Malicious AI poses a significant threat to logistics data within supply chains. Attackers can leverage AI to find vulnerabilities and launch sophisticated attacks, potentially disrupting operations and compromising sensitive information. This poses a risk to the integrity and security of supply chain data. |
| 2026-06-02 2026 | ReversingLabs Spectra Assure Wins 2026 Fortress Cybersecurity Award in Software Supply Chain Security news 2 min read | Library for securing the software supply chain. ReversingLabs Spectra Assure, recognized with a 2026 Fortress Cybersecurity Award, provides deep binary analysis for visibility and control against threats, addressing a 73% increase in malicious open-source packages. It offers significant efficiency improvements, reducing third-party risk management from months to a week and employee software approval times from hours to minutes. |
| 2026-06-02 2026 | Critical Supply Chain Attack Compromises 32 Red Hat @redhat-cloud-services NPM Packages with Credential-Stealing Malware news 5 min read | Library exploiting the @redhat-cloud-services NPM package supply chain attack, which injected Mini Shai-Hulud malware to steal credentials and propagate via GitHub Actions OIDC and NPM's bypass_2fa. This attack compromised 32 Red Hat packages, impacting over 116,000 weekly downloads and necessitating immediate rotation of all exposed secrets and affected package replacements. → rescana.com |
| 2026-06-02 2026 | Supply Chain Attack Hits 32 Red Hat NPM Packages news 2 min read | Analysis of a supply chain attack on 32 Red Hat NPM packages details a credential-stealing worm that exploited compromised CI/CD pipelines via GitHub Actions OIDC. The malicious preinstall hook executed during NPM install, harvesting sensitive data like GitHub secrets, npm tokens, and cloud credentials, similar to the Mini Shai-Hulud worm. Attackers exfiltrated data to attacker-controlled servers or GitHub repositories, with initial findings indicating at least 210 repositories may contain stolen credentials. Red Hat has since released clean versions of the affected packages. → securityweek.com |
| 2026-06-02 2026 | Attack targeting OpenAI Codex users exposes AI software supply chain risks news 3 min read | Analysis of codexui-android, a malicious npm package targeting OpenAI Codex users, reveals AI software supply chain risks. This package, downloaded thousands of times weekly, appeared legitimate but exfiltrated developer authentication tokens, including long-lived refresh tokens, by injecting malicious code into the distributed artifact, not the public GitHub source. This highlights a blind spot where build and distribution pipelines, rather than source code, become the attack vector, necessitating verification of package provenance and source code consistency. → csoonline.com |
| 2026-06-02 2026 | Multiple redhat-cloud-services npm Packages compromised news 9 min read | Library analyzing multiple @redhat-cloud-services npm packages compromised with malware, executing on install before application code. The payload uses ROT-21, AES-128-GCM, obfuscator.io, and a B5 cipher to evade detection and harvest secrets from GitHub Actions, AWS, GCP, Azure, Kubernetes, Vault, npm, and CircleCI. It also acts as a self-propagating worm, using stolen npm tokens and `bypass_2fa` to republish backdoored packages. Analysis involved static and dynamic techniques, including StepSecurity Harden-Runner. → stepsecurity.io |
| 2026-06-01 2026 | Miasma: Supply Chain Attack Targeting RedHat npm Packages news 3 min read | Analysis of Miasma details a supply chain attack targeting @redhat-cloud-services npm packages, compromising at least 32 releases. The attack involved unauthorized code modifications, obfuscated JavaScript payloads using eval() and ROT-based decoding, and new data collectors for GCP and Azure identities. This variant, similar to TeamPCP's (Mini) Shai-Hulud malware, employs unique encrypted payloads per infection. The root cause appears to be a compromised Red Hat employee GitHub account that injected malware via orphan commits and manipulated GitHub Actions to publish packages with valid SLSA provenance attestations. → wiz.io |
| 2026-06-01 2026 | Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm news 4 min read | Analysis of the Miasma supply chain attack details how compromised @redhat-cloud-services npm packages, including `@redhat-cloud-services/vulnerabilities-client` and others, were injected with an obfuscated preinstall hook. This hook targeted developer machines and CI/CD environments to steal credentials like GitHub Actions secrets, npm tokens, and cloud identities, employing tactics similar to the Mini Shai-Hulud worm. The malware exfiltrated data encrypted to `api.anthropic[.]com:443/v1/api` and leveraged GitHub commits for further propagation, with evidence suggesting a Red Hat employee's compromised GitHub account as the initial entry point. → thehackernews.com |
| 2026-05-31 2026 | Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard news 4 min read | Tool, Bumblebee, is a read-only scanner by Perplexity designed to check developer machines for risky packages, extensions, and AI tool configurations during supply-chain incidents. It targets four surfaces including language package managers like npm, pnpm, Yarn, Bun, PyPI, Go modules, RubyGems, and Composer. Unlike other tools, Bumblebee avoids executing scripts and directly inspects metadata files, preventing potential attacks triggered by scanner execution. It differentiates itself from Chainguard by focusing on the developer workstation environment rather than containers and build pipelines. |
| 2026-05-30 2026 | The hidden AI security flaw behind four major supply chain attacks news 12 min read | Library for hardening software supply chains against AI-related supply chain attacks, this resource details vulnerabilities in build systems and release workflows that bypass traditional AI model security testing. It highlights incidents impacting OpenAI, Anthropic, Meta, and TanStack, specifically mentioning the TanStack Mini Shai-Hulud worm's exploitation of GitHub Actions and cache poisoning, and the LiteLLM attack's reliance on credential reuse in PyPI. The library emphasizes the need for pipeline-focused red teams, behavioral validation of build processes, dependency credential hygiene, mandatory human review before releases, and strict input sanitization in build tools to mitigate risks like command injection. |
| 2026-05-30 2026 | Malicious npm packages abuse dependency confusion to profile developer environments news 13 min read | Library for detecting malicious npm packages that exploit dependency confusion to profile developer environments. These packages impersonate internal corporate namespaces and use obfuscated reconnaissance payloads downloaded from attacker-controlled C2 servers. They leverage npm lifecycle hooks for automatic execution during `npm install`, employing anti-analysis techniques and targeting various operating systems. The attack chain involves namespace squatting, spoofed enterprise metadata, and inflated version numbers, with a reconnaissance-only mode that collects system information and credentials for potential follow-on exploitation. → microsoft.com |
| 2026-05-29 2026 | Typosquatted npm packages used to steal cloud and CI/CD secrets news 7 min read | Library detailing an npm supply chain attack where typosquatted packages like "opensearch-setup" and "elastic-opensearch-helper" were used to steal AWS credentials, HashiCorp Vault tokens, and CI/CD secrets. The malicious packages leverage npm lifecycle hooks to execute a credential harvester that targets AWS IMDSv2, ECS task metadata, Secrets Manager across multiple regions, and npm publish tokens, enabling cloud lateral movement and downstream supply-chain pivoting. → microsoft.com |
| 2026-05-29 2026 | Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets news 4 min read | Library exploiting Sicoob NuGet and npm packages targets sensitive data. Malicious versions of "Sicoob.Sdk" exfiltrate client IDs and PFX certificates, while npm packages like "@vpmdhaj/devops-tools" harvest AWS credentials, Vault tokens, and CI/CD secrets. These attacks employ techniques such as typosquatting, dependency confusion, and brandjacking to achieve manufactured legitimacy and compromise developer workflows, echoing broader supply chain attack campaigns. → thehackernews.com |
| 2026-05-29 2026 | Supply chain attacks hide malicious code inside the software you trust beginner | Supply chain attacks insert malicious code into legitimate software, making it appear trustworthy. This sophisticated technique targets the development and distribution process, compromising the integrity of software before it reaches end-users. Attackers exploit vulnerabilities in third-party components, build systems, or distribution channels to inject malware. Once deployed, this hidden code can steal data, disrupt operations, or establish persistent access to systems. Protecting against these attacks requires rigorous security measures throughout the software lifecycle, including code verification, dependency scanning, and secure development practices. |
| 2026-05-28 2026 | GlassWorm Malware Takedown: Disruption of Developer Supply Chain Attacks Targeting VSCode npm Python and GitHub news 6 min read | Library detailing the disruption of the GlassWorm malware campaign, which targeted the developer supply chain. The malware utilized trojanized VSCode extensions, compromised npm and Python packages, and poisoned over 300 GitHub repositories using stolen credentials. GlassWorm RAT, its payload, harvested credentials from various developer tools and crypto-wallets, deploying SOCKS proxies and VNC clients. Its resilient C2 infrastructure leveraged the Solana blockchain, BitTorrent DHT, Google Calendar, and traditional VPS providers, requiring a coordinated takedown on May 26, 2026. → rescana.com |
| 2026-05-28 2026 | New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails beginner 3 min read | Platform for detecting AI coding agent drift and malicious behavior, Edamame monitors workstation posture, hardens environments, and integrates with agents like Cursor and Claude. Its divergence and attack-pattern detection engines analyze telemetry for credential exfiltration, token theft, and sandbox exploitation, providing runtime verification for coding agent workloads and identifying supply-chain attacks. → securityweek.com |
| 2026-05-27 2026 | CrowdStrike Google shatter Glassworm botnet news 3 min read | Tool for identifying and remediating application vulnerabilities, leveraging AI to detect issues before production. This resource discusses the impact of LLMs on API attacks, the challenges in data sovereignty, and the trend towards "headless" SaaS architectures, exemplified by Salesforce and Anthropic. It also touches on the hardware crunch impacting IT infrastructure and the evolving landscape of cloud-native platforms. → theregister.com |
| 2026-05-27 2026 | Glassworm Group: Software Supply-Chain Attackers Disrupted news 3 min read | Analysis of the Glassworm Group's software supply-chain attacks details their use of GlasswormRAT, a Node.js-based remote access Trojan, to poison code repositories like VS Code Marketplace and Open VSX. The group leverages stolen developer credentials to force-push malicious code into default branches of over 300 GitHub repositories, targeting Windows, Mac, and Linux systems. Their resilient command-and-control infrastructure utilized the Solana blockchain, BitTorrent, and Google Calendar for C2 server resolution. Indicators of compromise include connections to CrowdStrike-operated IP address 164.92.88.210. → bankinfosecurity.com |
| 2026-05-27 2026 | Glassworm botnet disrupted after resilient C2 infrastructure takedown news 2 min read | Analysis of Glassworm botnet disruption details its resilient C2 infrastructure, which leveraged Solana blockchain transactions, BitTorrent DHT, Google Calendar, and direct server connections. Researchers from CrowdStrike, Google, and The Shadowserver Foundation simultaneously took down these four channels, preventing infected machines from receiving new instructions or payloads. The report highlights Glassworm's targeting of developers through malicious OpenVSX and VS Code extensions, as well as npm packages, and provides YARA rules to identify infections. → bleepingcomputer.com |
| 2026-05-27 2026 | GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure news 3 min read | Library focused on disrupting the GlassWorm software supply chain attack campaign, which targeted developers via trojanized VS Code extensions, npm, and Python packages. This campaign aimed to steal credentials, cryptocurrency, and exfiltrate system data, often deploying GlassWormRAT. Attackers leveraged resilient C2 channels including the Solana blockchain, BitTorrent DHT, Google Calendar, and commercial VPS providers to maintain access and propagate, poisoning over 300 GitHub repositories. → thehackernews.com |