↓ Skip to main content

Supply Chain

2024

Apr 18

CVE-2024-3094 - Backdoor in XZ Vulnerability

2023

May 25

Typosquatting in NPM via capitalization Byte

May 9

Google opens a free deps.dev API for package metadata Byte

Feb 22

Building a spy Chrome extension under Manifest v3 Byte

Feb 22

Open Software Supply Chain Attack Reference (OSC&R) Byte

2022

Nov 29

Disrupting a PyPI Software Supply Chain Attack Byte

Sep 2

NSA released a guide on Securing the Software Supply Chain Byte

Aug 18

241 npm and PyPI packages caught dropping Linux cryptominers Byte

Aug 12

Check Point finds ten info-stealer packages on PyPI Byte

Aug 12

35,000 "hacked" GitHub repos were really search hits in malicious clones Byte

Jul 15

CuteBoi floods npm with thousands of crypto miner packages Byte

Jul 6

NPM software supply chain attack Byte

Jun 20

PyPI packages steal AWS keys and environment variables Byte

Jun 14

Malicious Dependency in multiple PyPI packages Byte