Malwarebytes Breach: Supply Chain Attacks Continue

Kaspersky Researchers Document New Infection Chains and IoCs in Notepad++ Supply Chain Attack

Kaspersky GReAT experts discovered previously undocumented infection chains used in the Notepad++ supply chain attack that occurred from Jun

Glassworm group: Software supply-chain attackers, suspected of being based in Russia, get disrupted by CrowdStrike, Google and Shadowserver Foundation, despite their efforts to maintain a highly resil

The Mastra supply chain attack wasn't about AI

September 2025 NPM supply-chain attack compromises popular JavaScript packages

In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack

Supply Chain Attack Wave Targets npm Packages and Go Ecosystem via Mini Shai-Hulud Malware Family

Socket Threat Research is tracking a new supply chain attack wave linked to the Mini Shai-Hulud, Miasma, and Hades malware family. The campa

Real-Time Investigation of LiteLLM 1.82.8 PyPI Supply Chain Attack on March 24, 2026

This article documents a real-time investigation and response to the LiteLLM 1.82.8 supply chain attack on March 24, 2026. It presents a min