supply chain attack

Tag: supply chain attack

Diagram showing an MCP server connection that appears clean for two calls then triggers a red alert on the third call, illustrating the Deadbugz supply-chain attack mechanism

Security

Deadbugz: The MCP Attack That Waits 3 Calls Before Striking

Deadbugz filed 23 GitHub PRs with a malicious MCP server that acts clean for 2 ...

By ByteBot

2 days ago

Security

737 Fake Chrome VPN Extensions Are Hijacking Your Traffic

Socket found 737 fake Chrome VPN extensions routing all browser traffic through unencrypted SOCKS5 proxies. ...

By ByteBot

August 25, 2026

AI & Development

LiteLLM Breach: How Your AI Stack Got Backdoored in March

TeamPCP poisoned LiteLLM 1.82.7 and 1.82.8 on PyPI in March 2026. If you use CrewAI, ...

By ByteBot

August 24, 2026

$Rust crab logo with fractured security warning overlay representing the arrayref supply chain attack on crates.io$

News

Rust arrayref Attack: Cargo Build Executes Malware Today

A Rust supply chain attack hit arrayref 0.3.10 today. If you ran cargo build between ...

By ByteBot

August 20, 2026

News

ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials

ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...

By ByteBot

August 15, 2026

Malicious extensions in the Open VSX marketplace targeting developer environments with supply chain attack visualization

News

77 Evil Twin Extensions Hit Open VSX — Act Now

77 fake extensions harvested developer and CI data from Open VSX. If you use VS ...

By ByteBot

August 14, 2026

Diagram showing GitHub Actions native egress firewall operating outside the runner VM at Layer 7, filtering outbound CI/CD network traffic

Cloud & DevOps

GitHub Actions Egress Firewall: The Control That Runs Outside Your Runner

GitHub’s native egress firewall for Actions runners is in technical preview. It runs at Layer ...

By ByteBot

August 12, 2026

News

ChainDrop Worm Hits 400 npm Packages: Rotate Credentials Now

ChainDrop npm worm hit keyv and 443 more packages on August 4. It steals AWS, ...

By ByteBot

August 9, 2026

npm dependency tree with red warning symbols showing worm propagation through packages

News

npm keyv Supply Chain Attack: 127M Downloads Hit via ESLint

The keyv npm worm hit 444 packages and 2B+ monthly installs on Aug 4. If ...

By ByteBot

August 6, 2026

News

Keyv npm Supply Chain Attack: Shai-Hulud Hits 2B Installs

Keyv and 868 npm packages compromised by Shai-Hulud worm malware today — over 2B monthly ...

By ByteBot

August 4, 2026

12 3...6

Tag: supply chain attack

Posts navigation

Categories

Latest Posts