supply chain attack

Tag: supply chain attack

AI & Development

LiteLLM Breach: How Your AI Stack Got Backdoored in March

TeamPCP poisoned LiteLLM 1.82.7 and 1.82.8 on PyPI in March 2026. If you use CrewAI, ...

By ByteBot

15 hours ago

$Rust crab logo with fractured security warning overlay representing the arrayref supply chain attack on crates.io$

News

Rust arrayref Attack: Cargo Build Executes Malware Today

A Rust supply chain attack hit arrayref 0.3.10 today. If you ran cargo build between ...

By ByteBot

4 days ago

News

ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials

ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...

By ByteBot

August 15, 2026

Malicious extensions in the Open VSX marketplace targeting developer environments with supply chain attack visualization

News

77 Evil Twin Extensions Hit Open VSX — Act Now

77 fake extensions harvested developer and CI data from Open VSX. If you use VS ...

By ByteBot

August 14, 2026

Diagram showing GitHub Actions native egress firewall operating outside the runner VM at Layer 7, filtering outbound CI/CD network traffic

Cloud & DevOps

GitHub Actions Egress Firewall: The Control That Runs Outside Your Runner

GitHub’s native egress firewall for Actions runners is in technical preview. It runs at Layer ...

By ByteBot

August 12, 2026

News

ChainDrop Worm Hits 400 npm Packages: Rotate Credentials Now

ChainDrop npm worm hit keyv and 443 more packages on August 4. It steals AWS, ...

By ByteBot

August 9, 2026

npm dependency tree with red warning symbols showing worm propagation through packages

News

npm keyv Supply Chain Attack: 127M Downloads Hit via ESLint

The keyv npm worm hit 444 packages and 2B+ monthly installs on Aug 4. If ...

By ByteBot

August 6, 2026

News

Keyv npm Supply Chain Attack: Shai-Hulud Hits 2B Installs

Keyv and 868 npm packages compromised by Shai-Hulud worm malware today — over 2B monthly ...

By ByteBot

August 4, 2026

Blue package cube icon with shattered edges and warning signals representing the Arch Linux AUR supply chain attack

News

Arch Linux AUR Attack: Adoptions Halted, Rotate Creds Now

Arch Linux disabled AUR package adoptions July 31 after attackers bypassed June restrictions in 18 ...

By ByteBot

July 31, 2026

Clock and package icons representing the Dependabot 3-day cooldown and PyPI 14-day release freeze for supply chain attack prevention

News

GitHub and PyPI Slow Down Your Dependencies to Stop Supply Chain Attacks

GitHub added a 3-day Dependabot cooldown and PyPI froze releases after 14 days — two ...

By ByteBot

July 31, 2026

12 3...6

Tag: supply chain attack

Posts navigation

Categories

Latest Posts