GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
Mini Shai-Hulud Hits Hundreds of npm Packages in AntV EcosystemInfosecurity Magazine·May 20, 15:00 UTC · May 20, 2026Data breach57
PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal CredentialsThe Hacker News·May 1, 16:27 UTC · May 1, 2026Ransomware57
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain CampaignThe Hacker News·Apr 26, 07:45 UTC · Apr 26, 2026Threat actor57
Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer TokensThe Hacker News·Apr 24, 17:03 UTC · Apr 24, 2026Data breach157
OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain IncidentThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026RansomwareCVE-2026-3363460
TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV FilesThe Hacker News·Mar 28, 06:25 UTC · Mar 28, 2026Malware42
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer SecretsThe Hacker News·Mar 11, 12:57 UTC · Mar 11, 2026Data breachCVE-2026-2835360
Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer SystemsThe Hacker News·Feb 20, 14:40 UTC · Feb 20, 2026Threat actor57
Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain AttackThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Data breach157
Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attackHelp Net Security·Sep 16, 00:00 UTC · Sep 16, 2025Data breach57
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 RepositoriesThe Hacker News·Mar 18, 04:03 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066CVE-2023-49291160
tj-actions Supply Chain Attack Exposes 23,000 OrganizationsInfosecurity Magazine·Mar 17, 10:00 UTC · Mar 17, 2025VulnerabilityCVE-2025-3006647
Week in review: Patch Tuesday forecast, 9 free ransomware guides, Cybertech Europe 2023Help Net Security·Oct 8, 00:00 UTC · Oct 8, 2023Ransomware in the wildCVE-2023-4211CVE-2023-4911CVE-2023-40044+6 CVEs60
Securing GitHub Actions for a safer DevOps pipelineHelp Net Security·Oct 2, 00:00 UTC · Oct 2, 2023Vulnerability42