Trojanized npm Packages Unleash AI-Powered RedC2 4.0 Backdoor
PremiumTrojanized npm packages install RedC2 4.0 Linux backdoor with AI-assisted command-and-control capabilities.
§Topic · Supply Chain Attacks
Supply Chain Attacks
Compromised packages, typosquatting campaigns, malicious dependencies, and software supply chain incidents on npm, PyPI, Go, and Rust.
All dispatchesMonday, August 24
Android Car Head Units Compromised by Botnet Malware
PremiumSupply-chain compromise of Android car head unit updater spreads malware to build ad-fraud and proxy botnet on vehicles.
Rust Crates Hit by Supply Chain Attack Revealing Build-Time Malware
PremiumMalicious Rust crate releases introduced build-time payloads, affecting widely used packages and prompting removals.
Wednesday, August 19
Friday, August 14
Wednesday, August 12
BdThemes Supply Chain Breach Exploits JSON Feeds in WordPress Plugins
BdThemes supply-chain compromise poisoned JSON feeds to create rogue WordPress admin accounts, backdooring sites without modifying plugin files.
Ceva Logistics Data Breach Disrupts European Supply Chain
Ceva Logistics suffers supply-chain data breach, disrupting warehouse operations and impacting multiple European retail customers.
Monday, August 10
Critical Vulnerabilities in Claude Code and Gemini CLI Expose CI Workflow Secrets
PremiumFlaws in Claude Code and Google's Gemini CLI let an unprivileged GitHub issue execute code on CI runners and expose secrets.
TeamPCP's Long-Running Cyber Attacks Unveiled
PremiumAnalysis links TeamPCP to Redis attacks from 2020 and to later supply-chain campaigns via overlapping infrastructure and domains.
TrueConf Servers Compromised: Backdoor Infiltration Discovered
PremiumThreat actors exploited unpatched TrueConf servers to replace client installers with trojanized backdoors for remote access.
Massive Malware Campaign Exploits npm Packages to Spread RAT and Infostealer
PremiumCampaign published nearly 800 malicious npm packages delivering a cross-platform RAT and infostealer for Windows, macOS and Linux.
Friday, August 7
ChainDrop Worm Infiltrates Hundreds of npm Packages, Threatens Billions of Installs
PremiumChainDrop npm worm compromised 400+ packages, impacting components with combined monthly installs exceeding two billion.
QuickFox Supply Chain Breach Unveils FDMTP Backdoor Deployment
PremiumQuickFox supply-chain compromise trojanized Windows installer to deliver FDMTP backdoor in deployments since at least August 2025.
AI Coding Agents Expose Critical Vulnerabilities
PremiumRepeatable vulnerabilities across Anthropic, Google, and OpenAI coding agents allow RCE, API credential theft, and supply-chain compromise.
De Bijenkorf Data Exposure: Cyberattack on Logistics Partner Raises Concerns
PremiumDe Bijenkorf notifies customers of potential exposure after a third-party logistics provider suffered a cyber incident affecting retail data.
Wednesday, August 5
Security Flaws in Hugging Face Diffusers Expose AI Supply Chain Risks
Three high-severity Diffusers library flaws let crafted model repositories execute arbitrary code, bypassing trust_remote_code protections.
Massive Supply Chain Attack Hits npm Packages, Exposing Billions to Credential Theft
Mini Shai-Hulud/npm campaign compromises popular packages, indicating coordinated supply-chain poisoning activity.
Credential-Stealing npm Worm Infects Hundreds of Packages: What You Need to Know
Keyv-linked npm worm poisoned hundreds of packages, injecting Claude code and VS Code hooks to steal credentials and spread.
Żabka Cyberattack Exposes Internal Systems via Third-Party Account Compromise
7babka retail chain experienced an intrusion via a compromised third-party account exposing Jira and sensitive data.
ChainDrop Attack Compromises Over a Thousand npm Packages
ChainDrop poisoned 1,300+ npm packages, threatening developer supply chains and downstream applications.
Get these articles delivered to your inbox.
Subscribe free