#supply-chain_1
-
ARTEX AI Agents Supercharged the ConnectWise Supply Chain Attack
Microsoft has tied the recent ConnectWise cloud compromise to China-aligned Storm-0940, which deployed the agentic AI framework ARTEX to automate attacks at "machine speed."
-
Compromised LiteLLM 1.107.0 on PyPI shipped a credential stealer and backdoor
Version 1.107.0 of the popular LLM gateway LiteLLM, uploaded to PyPI, carried a credential stealer and a remote-code-execution backdoor. The GitHub source was clean, yet the malicious files ran on every Python process start on the host.
-
DirtyBlanket: fake Express packages on npm spread a self-replicating Linux worm
In 33 minutes the npm account dirtyblanket published nine malicious packages impersonating Express and React. Installing any of them on Linux starts a worm that steals keys and tokens and infects new machines.
-
An undercover Google analyst infiltrated a notorious hacking gang
Google says one of its threat analysts made it inside the inner circle of TeamPCP, a group known for supply-chain attacks.
-
OpenAI's AI Agents Carried Out an Undisclosed Attack on RubyGems
In May 2026, a swarm of AI agents believed to belong to OpenAI uploaded hundreds of malicious packages to RubyGems, achieved code execution on RubyDoc.info's servers, and tried to steal users' API keys. The company never notified the registry of its role.
-
The “Trusting Trust” Attack via strip: How to Infect an Entire Linux Distribution
Researchers have shown that Ken Thompson's famous attack on the compiler isn't limited to compilers — they carried it out through the strip utility and planted a backdoor in nearly every binary in NixOS.
-
A Rust Supply-Chain Attack: the Poisoned arrayref 0.3.10 and the proc-macro1 Typosquat
A compromised maintainer account and a fake copy of a well-known author's crate turned a routine cargo update into the silent execution of malicious code whenever a project was built.
-
Terabytes of Credentials Leaked: A Supply-Chain Attack via LiteLLM
The compromise of LiteLLM, a popular AI-development tool, led to the theft of secrets from more than 2,500 organizations, among them Microsoft, Amazon, Cisco, Samsung and Salesforce.