Search: “software supply chain”

703 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 1085 Ransomware 766 Malware 704 Data breach 359 Exploit / PoC 354 Threat actor 244 Policy & legal 239 Industry 158 Phishing & fraud 74 AI safety & security 53 Advisory 36 Research 32 AI tools & infra 31 AI industry 13

SeverityAll critical 2093 high 1827 medium 121 low 20 info 126

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

The Hacker NewsApr 12, 03:41 UTC · Apr 12, 2023Malware

42

Malicious PyTorch Lightning update hits AI supply chain security

Security AffairsMay 6, 07:04 UTC · May 6, 2026Malware

42

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

The Hacker NewsOct 2, 13:07 UTC · Oct 2, 2025Malware

42

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

The Hacker NewsApr 10, 14:18 UTC · Apr 10, 2025Malware

42

Over a Dozen Malicious npm Packages Target Roblox Game Developers

The Hacker NewsAug 23, 06:37 UTC · Aug 23, 2023Malware

42

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Hacker NewsMar 30, 05:08 UTC · Mar 30, 2024Malware

42

Microsoft revealed details of a supply chain attack at unnamed Maker of PDF Editor

Security AffairsJul 28, 08:32 UTC · Jul 28, 2018Malware

42

Malicious npm Packages Found Using Image Files to Hide Backdoor Code

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Malware

42

Researchers Hijack Popular NPM Package with Millions of Downloads

The Hacker NewsFeb 17, 04:29 UTC · Feb 17, 2023Malware

42

PyPI Python Library "aiocpa" Found Exfiltrating Crypto Keys via Telegram Bot

The Hacker NewsNov 29, 08:53 UTC · Nov 29, 2024Malware

42

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The Hacker NewsJul 5, 09:00 UTC · Jul 5, 2023Malware

42

Injective Labs GitHub Compromise Pushes Wallet-Key

The Hacker NewsJul 10, 17:54 UTC · Jul 10, 2026Malware

42

Open source malware up 200% since 2023

Help Net SecurityDec 11, 00:00 UTC · Dec 11, 2024Malware

42

Venafi Stop Unauthorized Code Solution reduces attack surface

Help Net SecurityJan 24, 00:00 UTC · Jan 24, 2024Malware

42

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

The Hacker NewsOct 28, 17:12 UTC · Oct 28, 2024Malware

42

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

The Hacker NewsMay 7, 07:37 UTC · May 7, 2025Malware

42

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

The Hacker NewsMay 26, 02:35 UTC · May 26, 2022Malware1

55

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

Legitimate software tainted in attacks on Hong Kong organizations, report says

The RecordAug 22, 13:39 UTC · Aug 22, 2023Malware

42

Researchers Uncover Rust Supply Chain Attack Targeting Cloud CI Pipelines

The Hacker NewsMay 21, 03:11 UTC · May 21, 2022Malware

42

Carderbee APT targets Hong Kong orgs via supply chain attacks

Security AffairsAug 23, 08:21 UTC · Aug 23, 2023Malware

42

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

The Hacker NewsJun 4, 06:13 UTC · Jun 4, 2024Malware

42

Delivering Malware Through Abandoned Amazon S3 Buckets

Schneier on SecurityFeb 12, 19:32 UTC · Feb 12, 2025Malware

42

North Korean Hackers Suspected in New Wave of Malicious npm Packages

The Hacker NewsAug 17, 13:38 UTC · Aug 17, 2023Malware

42

Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2024Malware

42

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

The Hacker NewsMay 6, 16:00 UTC · May 6, 2026Malware

42

North Korean Kimsuky used a new Linux backdoor in recent attacks

Security AffairsMay 19, 11:13 UTC · May 19, 2024Malware

42

ShadowPad backdoor was spread in corporate networks through software update mechanism

Security AffairsMay 7, 12:30 UTC · May 7, 2018Malware

55

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

The Hacker NewsDec 30, 05:06 UTC · Dec 30, 2022Malware1

42

Here's a New Tool That Scans Open-Source Repositories for Malicious Packages

The Hacker NewsMay 3, 03:59 UTC · May 3, 2022Malware

42

US Agencies hacked with a supply chain attack on SolarWinds Software

Security AffairsDec 14, 09:24 UTC · Dec 14, 2020Malware

42

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

The Hacker NewsDec 7, 10:54 UTC · Dec 7, 2024Malware

42

Hidden Devil in the Development Life Cycle: Google Play Apps Infected with Windows Executable Files

Palo Alto Unit 42Nov 2, 11:32 UTC · Nov 2, 2018Malware1

55

Hundreds of apps removed from Google Play store because were carrying malware

Security AffairsAug 1, 08:09 UTC · Aug 1, 2018Malware

55

60 New Malicious Packages Uncovered in NuGet Supply Chain Attack

The Hacker NewsJul 12, 03:38 UTC · Jul 12, 2024Malware

42

JAVS Courtroom Recording Software Backdoored

The Hacker NewsMay 25, 04:53 UTC · May 25, 2024Malware CVE-2024-4978

47

1 In 10 Targeted Attack Groups Use Malware Designed To Disrupt

Help Net SecurityJun 26, 21:20 UTC · Jun 26, 2018Malware

55

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

The Hacker NewsJan 19, 07:42 UTC · Jan 19, 2024Malware

55