supply chain | byteiota

Tag: supply chain

VS Code extension icon split by malicious data stream representing the Open VSX evil twin supply chain attack

Security

77 Open VSX Extensions Stealing Dev Data: Act Now

77 malicious Open VSX extensions harvested developer data from Cursor, Windsurf, and VSCodium users. Here ...

By ByteBot

1 day ago

PyPI padlock securing a Python package with 14-day calendar restriction

Cloud & DevOps

PyPI Locks Old Releases After 14 Days: Migrate Now

PyPI now rejects new file uploads to releases older than 14 days. Here is what ...

By ByteBot

July 30, 2026

Cloud & DevOps

AsyncAPI npm Backdoor: –ignore-scripts Won’t Save You

AsyncAPI npm packages backdoored via the project's own CI pipeline on July 14. Import-time malware ...

By ByteBot

July 22, 2026

ViteVenom malicious npm packages using blockchain C2 infrastructure to deliver remote access trojans targeting Vite developers

Security

ViteVenom: 7 Fake npm Packages Use Blockchain to Deliver RATs

Seven malicious npm packages impersonating @vitejs/* deliver a RAT via blockchain C2 — infrastructure that ...

By ByteBot

July 19, 2026

Magnifying glass revealing hidden Unicode tracking markers inside Claude Code system prompts

AI & Development

Claude Code Hid Tracking Markers in Your Prompts

Claude Code secretly embedded invisible steganographic tracking markers in system prompts from April to July ...

By ByteBot

July 6, 2026

Visualization of the Rust compiler translated into C code, showing the crustc project by FractalFir

News

crustc: The Entire Rust Compiler, Translated to C

A developer translated the entire Rust compiler into 46 million lines of C using the ...

By ByteBot

July 3, 2026

GitHub license compliance scanning pull requests for GPL and copyleft dependency violations

Cloud & DevOps

GitHub License Compliance: What Will Block Your PRs Now

GitHub shipped Open Source License Compliance into public preview on June 30. It scans every ...

By ByteBot

July 3, 2026

Security

15 Malicious JetBrains Plugins Stole AI API Keys — Revoke Yours Now

Fifteen JetBrains Marketplace plugins with 70,000 installs secretly stole AI API keys for 8 months. ...

By ByteBot

June 22, 2026

JetBrains Marketplace plugin interface with warning symbols and API key exfiltration visualization

News

15 JetBrains Plugins Stole AI API Keys — 70,000 Installs

Aikido Security found 15 malicious JetBrains Marketplace plugins that silently stole OpenAI and DeepSeek API ...

By ByteBot

June 18, 2026

Split-screen illustration showing the contrast between trusted human open source contributions and AI-generated pull requests breaking the trust signal

News

Ladybird Closes Public PRs — AI Broke the Trust Signal

Ladybird browser shut down public pull requests today. AI has broken the effort-equals-good-faith assumption open ...

By ByteBot

June 5, 2026

Tag: supply chain

Posts navigation

Categories

Latest Posts