#supply-chain
-
AI assistant session hijacked: the Shai-Hulud worm spread across a hundred repositories
Mandiant described an attack in which an attacker hijacked an active session of a developer's AI assistant and, through a poisoned package it had recommended, launched a self-propagating worm.
-
Hack of Admin Menu Editor Pro Developer Turned Updates Into a Backdoor on 1,500 WordPress Sites
The attacker gained access to the site of the developer behind a popular plugin and distributed malicious updates that create a hidden administrator account. At least 230 customers were affected.
-
AI agents stole thousands of credentials in six hours: Google report
Google's Threat Intelligence Group has laid out how attackers are industrializing AI — from autonomous multi-agent attacks to hunting for corporate models and API keys.
-
AI Agents Are Installing Unregistered Code on Corporate Networks
Researchers have shown that AI agents blindly trust llms.txt files and pull in packages via links to unclaimed domains — fertile ground for supply-chain attacks.
-
Coder Infrastructure Breach: Attackers Served Malicious Terraform Modules
Attackers infiltrated Coder's cloud infrastructure and spoofed its registry servers to distribute modules carrying credential-stealing code.
-
The Shai-Hulud Worm Now Hunts for Credentials in 469 Places — and That's a Symptom of a Tactical Shift
GitGuardian researchers have found that a new variant of the Shai-Hulud infostealer worm checks 469 secret-storage locations instead of the previous 189. Attackers have stopped breaking trust in the supply chain and are simply harvesting the keys that trust rests on.
-
JFrog Artifactory Critical Vulnerability Comes Under Attack Within Days
Attackers are exploiting a fresh authentication bypass flaw in JFrog Artifactory to mint themselves admin tokens. According to watchTowr, the attacks began just days after disclosure.
-
BGP Hijacking Attack: Virtualizor Users Served a Malicious Update
Attackers hijacked the BGP routing of Softaculous's update infrastructure and, for several days, redirected the traffic to their own servers, delivering an infected package to some installations of the VPS control panel.
-
18 Chrome extensions and one for Edge stole crypto wallet keys
Socket researchers have exposed the Superior campaign: attackers bought up and built harmless extensions, then used auto-updates to turn them into tools for stealing cryptocurrency.
-
Two Factory Implants with Root Access Found in ZBT Router Firmware
Researchers at VulnCheck have discovered two undocumented factory implants in the firmware of Chinese-made ZBT routers, giving an unauthenticated attacker remote command execution with root privileges.
-
AI agents installed “unowned” code inside corporate networks because of llms.txt files
Researchers in Israel found 227 commands across the documentation of more than a hundred sites that install packages and domains owned by no one. Coding agents like Claude, Codex and Hermes dutifully ran them — including inside Fortune 500 companies.
-
Two TeamPCP Suspects Arrested in Australia
The Australian Federal Police has arrested two young men from Western Australia believed to be members of TeamPCP — the group behind the longest-running string of software supply-chain attacks. The collective's leader was undone by his own carelessness.
-
14 Trojanized npm Packages Deploy the AI-Controlled Linux Backdoor RedC2 4.0
Trend Micro researchers have found a set of npm packages that, posing as calendar utilities, covertly deploy the Linux implant RedC2 4.0. A single import anywhere in the dependency tree — even a transitive one — is enough to trigger the payload.
-
16 Fake RubyGems Steal Passwords and Crypto Wallets Under the Guise of a Build
The StubMaker campaign disguises typos as popular Ruby libraries and launches a Windows stealer, exploiting flaws in RubyGems itself.
-
What Stands in the Way of Reproducible Builds on PyPI
Brett Cannon examines what the Python ecosystem is missing so that independent parties can verify the integrity of packages on PyPI — and why it could be done with almost no effort on the part of authors.
-
Malicious LiteLLM Builds May Have Affected More Than 2,100 Organizations
Two poisoned versions of the AI gateway LiteLLM spent about 40 minutes on PyPI, but managed to harvest cloud keys, SSH keys and Kubernetes tokens. The incident is part of the TeamPCP attack chain tied to the compromise of the Trivy scanner.
-
BdThemes Supply-Chain Attack Creates Hidden WordPress Admins
An attacker compromised the infrastructure of premium plugin developer BdThemes and, through a poisoned JSON feed, created hidden administrator accounts on victims' sites.
-
Open VSX Removes 77 “Evil Twin” Extensions That Stole Developer Data
The Open VSX marketplace has purged a cluster of 77 malicious extensions that masqueraded as genuine tools and shipped data about developers' systems and environments to a domain controlled by the attackers.
-
Trojanized QuickFox Installer Delivered the FDMTP Backdoor
Fortinet researchers have uncovered a years-long supply-chain attack on QuickFox, a VPN service aimed at Chinese nationals abroad: an infected Windows installer deployed the FDMTP backdoor, previously linked to the Mustang Panda group.
-
ChainDrop worm infects more than 1,300 npm packages with 2 billion downloads a month
The self-propagating ChainDrop malware has compromised popular npm packages, including the Keyv and Cacheable caching utilities, and steals developer and cloud-service credentials.
- More