supply chain attack

Tag: supply chain attack

A shield blocking a red vulnerable package box from entering a terminal — representing the Refuse open-source security shim for npm, pip, cargo and AI coding agents

AI & Development

Refuse: Block Vulnerable Package Installs Before Your AI Agent Does

Refuse is an open-source shim that intercepts npm, pip, cargo, and 15 more package managers ...

By ByteBot

2 days ago

npm package backdoor supply chain attack illustration with blue circuit board and cracked lock on dark background

News

jscrambler npm Backdoored: Rotate Your Credentials Now

The jscrambler npm package was backdoored five times on July 11, 2026. Five malicious versions ...

By ByteBot

2 days ago

AI coding agent hallucinating package names leading to supply chain attack — slopsquatting concept illustration

AI & Development

Slopsquatting: Your AI Coding Agent Is Now a Supply Chain Risk

AI coding agents hallucinate package names — and attackers register them. Here is how slopsquatting ...

By ByteBot

July 4, 2026

GitHub repository interface showing a trojanized requirements.txt file with malicious frint package highlighted, representing the ChocoPoC RAT supply chain attack on security researchers

Security

ChocoPoC: Malware Hiding in GitHub PoC Repos — Act Now

A new Python RAT named ChocoPoC hides in GitHub PoC dependencies, not the exploit file ...

By ByteBot

July 4, 2026

Miasma supply chain worm injecting malicious code into AI coding tool configuration files like .claude/settings.json

Developer Tools

Miasma Worm Targets AI Coding Tools: What Developers Must Do

The Miasma supply chain worm injects itself into Claude Code and Copilot session hooks. Here ...

By ByteBot

June 30, 2026

Autonomous AI agent robots breaching developer CI/CD pipeline infrastructure with circuit-board patterns on dark blue background

Security

AI Agents Are Now Hacking Developer Infrastructure

Two 2026 attacks — Hackerbot-Claw (GitHub Actions) and the Mastra npm compromise by North Korean ...

By ByteBot

June 30, 2026

VS Code editor with Amazon Q extension showing malicious MCP config file stealing AWS credentials - CVE-2026-12957

Security

CVE-2026-12957: Amazon Q Silently Stole Your AWS Keys

Amazon Q Developer auto-executed MCP configs from cloned repos, handing attackers your AWS credentials. CVE-2026-12957 ...

By ByteBot

June 29, 2026

Dark themed image showing a malicious npm package box with warning symbols and PowerShell code, representing the PostCSS supply chain attack

News

Fake PostCSS npm Packages Drop a Windows RAT — Act Now

Three malicious npm packages impersonating PostCSS tools installed a Windows RAT on developer machines. Check ...

By ByteBot

June 24, 2026

GitHub repositories distributing trojan malware via the Orchid campaign targeting AI coding agents

AI & Development

GitHub’s 10,000 Trojan Repos: The Orchid Campaign Targets AI Agents

A solo researcher exposed 10,000 GitHub repositories delivering StealC malware, undetected for over a year. ...

By ByteBot

June 23, 2026

Malicious GitHub repository clone attack targeting AI coding agents — cybersecurity warning illustration

News

10,000 Trojan GitHub Repos Are Targeting AI Agents — Audit Your Dependencies Now

Over 10,000 malicious GitHub repositories have been serving Trojan ZIPs for 18 months, now targeting ...

By ByteBot

June 23, 2026

12 3...5

Tag: supply chain attack

Posts navigation

Categories

Latest Posts