Search: “software supply chain”

506 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 1085 Ransomware 766 Malware 704 Data breach 359 Exploit / PoC 354 Threat actor 244 Policy & legal 239 Industry 158 Phishing & fraud 74 AI safety & security 53 Advisory 36 Research 32 AI tools & infra 31 AI industry 13

SeverityAll critical 2093 high 1827 medium 121 low 20 info 126

North Korean Hacker Suspected in 3CX Software Supply Chain Attack

Infosecurity MagazineApr 20, 17:30 UTC · Apr 20, 2023Malware

42

LofyGang Group Linked to Recent Software Supply Chain Attacks

Infosecurity MagazineOct 7, 18:00 UTC · Oct 7, 2022Malware

42

Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise

The Hacker NewsMay 8, 11:00 UTC · May 8, 2026Malware

42

Massive Malicious NPM Package Attack Threatens Software Supply Chains

Recorded FutureMay 26, 00:00 UTC · May 26, 2026Malware

42

A New Software Supply‑Chain Attack Targeted Millions With Spyware

The Hacker NewsFeb 2, 03:40 UTC · Feb 2, 2021Malware

42

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

The Hacker NewsDec 20, 05:29 UTC · Dec 20, 2022Malware

42

3CX Breach Was a Double Supply Chain Compromise

Krebs on SecurityApr 21, 02:22 UTC · Apr 21, 2023Malware

42

W4SP Stealer Constantly Targeting Python Developers in Ongoing Supply Chain Attack

The Hacker NewsNov 19, 04:11 UTC · Nov 19, 2022Malware

42

Chainguard Libraries for JavaScript provides developers with malware-free dependencies

Help Net SecuritySep 25, 00:00 UTC · Sep 25, 2025Malware

42

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

The Hacker NewsJun 8, 17:09 UTC · Jun 8, 2026Malware

42

27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts

The Hacker NewsNov 17, 12:15 UTC · Nov 17, 2023Malware

42

FBI warns of nation

Security AffairsMar 31, 11:20 UTC · Mar 31, 2020Malware

42

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

The Hacker NewsSep 10, 00:27 UTC · Sep 10, 2025Malware

42

CISA urges orgs to review software after ‘Shai

The RecordSep 25, 01:38 UTC · Sep 25, 2025Malware

42

Researchers Uncover Backdoor in Solana's Popular Web3.js npm Library

The Hacker NewsDec 6, 03:34 UTC · Dec 6, 2024Malware CVE-2024-54134

47

Over 67,000 Fake npm Packages Flood Registry in Worm

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Malware

42

Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

The Hacker NewsNov 9, 04:36 UTC · Nov 9, 2023Malware

42

Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets

The Hacker NewsMar 12, 15:56 UTC · Mar 12, 2024Malware

42

Software Supply-Chain Attack Hits Vietnam Government Certification Authority

The Hacker NewsDec 18, 04:56 UTC · Dec 18, 2020Malware

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates

The Hacker NewsMar 19, 18:54 UTC · Mar 19, 2026Malware

42

Malware Strains Targeting Python and JavaScript Developers Through Official Repositories

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Malware1

42

Malicious npm Packages Exploit Ethereum Smart Contracts

Infosecurity MagazineSep 3, 15:45 UTC · Sep 3, 2025Malware

42

Solana's popular web3.js library backdoored in supply chain compromise

Help Net SecurityDec 6, 09:08 UTC · Dec 6, 2024Malware

42

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

The Hacker NewsFeb 6, 08:40 UTC · Feb 6, 2026Malware

42

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

The Hacker NewsDec 21, 08:59 UTC · Dec 21, 2024Malware

42

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

The Hacker NewsMay 27, 15:23 UTC · May 27, 2026Malware

42

Ongoing supply chain attack targets Python developers with WASP Stealer

Security AffairsNov 18, 08:24 UTC · Nov 18, 2022Malware1

42

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

The Hacker NewsApr 12, 03:41 UTC · Apr 12, 2023Malware

42

Malicious PyTorch Lightning update hits AI supply chain security

Security AffairsMay 6, 07:04 UTC · May 6, 2026Malware

42

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

The Hacker NewsOct 2, 13:07 UTC · Oct 2, 2025Malware

42

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

The Hacker NewsApr 10, 14:18 UTC · Apr 10, 2025Malware

42

Over a Dozen Malicious npm Packages Target Roblox Game Developers

The Hacker NewsAug 23, 06:37 UTC · Aug 23, 2023Malware

42

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Hacker NewsMar 30, 05:08 UTC · Mar 30, 2024Malware

42

Microsoft revealed details of a supply chain attack at unnamed Maker of PDF Editor

Security AffairsJul 28, 08:32 UTC · Jul 28, 2018Malware

42

Malicious npm Packages Found Using Image Files to Hide Backdoor Code

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Malware

42

Researchers Hijack Popular NPM Package with Millions of Downloads

The Hacker NewsFeb 17, 04:29 UTC · Feb 17, 2023Malware

42

PyPI Python Library "aiocpa" Found Exfiltrating Crypto Keys via Telegram Bot

The Hacker NewsNov 29, 08:53 UTC · Nov 29, 2024Malware

42

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The Hacker NewsJul 5, 09:00 UTC · Jul 5, 2023Malware

42

Injective Labs GitHub Compromise Pushes Wallet-Key

The Hacker NewsJul 10, 17:54 UTC · Jul 10, 2026Malware

42