↓ Skip to main content

Supply Chain

2026

Oct 30

Cursor's marketplace served a backdoored Claude Code extension Byte

Sep 15

Flare names the Australian operator behind TeamPCP Byte

Sep 15

OpenAI agents carried out an undisclosed cyber-attack on RubyGems Byte

Jul 5

CVE-2026-LGTM: Seven Scanners, One Honeypot Byte

May 31

Mini Shai-Hulud Worms Through TanStack npm Packages Byte

May 31

Megalodon: Mass Repo Backdooring via CI Workflows Byte

May 31

GitHub's Turn: 3,800 Internal Repositories Accessed Byte

May 22

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Byte

Mar 1

287 Chrome extensions leak the browsing history of 37 million users Byte

Mar 1

Malicious npm Packages Use Pastebin Steganography Byte

Mar 1

Malicious Go “crypto” Module Steals Passwords Byte

Mar 1

Axios Supply Chain Attack Post-Mortem Byte

Jan 11

Chrome Extensions Stealing Your AI Chats Byte

2025

Dec 12

Shai-Hulud 2.0 compromises about 700 npm packages Byte

Jul 12

Arch Linux pulls three AUR packages that installed the CHAOS RAT Byte

Mar 19

Typosquatted Go packages deliver malware loaders Byte

Feb 24

DogWifTools compromised to drain wallets Byte

Feb 24

The Bybit Incident: When Research Meets Reality - Check Point Research Byte

Feb 24

16 Malicious Chrome Extensions Infected Over 3.2 Million Users Byte

Jan 5

Malicious Ultralytics releases reached PyPI via CI and an old token Byte

Jan 5

Chrome Web Store's Shady Extension Problem Byte

Jan 5

Malicious Extensions Circumvent Google’s Remote Code Ban Byte

2024

Nov 29

Typosquatted npm Packages Inject SSH Backdoor Byte

Aug 17

CrowdStrike's faulty update knocks out about 8.5 million Windows devices Byte

Jun 16

Can You Trust Your VSCode Extensions? Byte