Hades PyPI Attack: 19 Packages Poisoned to AutoThe Hacker News·Jun 9, 10:34 UTC · Jun 9, 2026Malware142
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain AttackThe Hacker News·Jul 10, 17:27 UTC · Jul 10, 2026Malware42
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain AttacksThe Hacker News·Jun 8, 17:09 UTC · Jun 8, 2026Malware42
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code HooksThe Hacker News·Aug 4, 15:03 UTC · Aug 4, 2026Malware142
Malicious PyTorch Lightning update hits AI supply chain securitySecurity Affairs·May 6, 07:04 UTC · May 6, 2026Malware42
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer AccountThe Hacker News·May 21, 05:56 UTC · May 21, 2026Malware42
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42