Supply Chain Security RSS Feeds

Directory0 supply chain security feeds · 17 articlesShow all languages →

Latest

Supply Chain Security articles

Supply Chain Attack Wave Targets npm Packages and Go Ecosystem via Mini Shai-Hulud Malware Family

Socket Threat Research is tracking a new supply chain attack wave tied to the Mini Shai-Hulud, Miasma, and Hades malware family, affecting LeoPlatform/RStreams npm packages, three llxlr-published npm packages, and the Verana Blockchain Go m...

Newstechnologycybersecurityprogramming

hendryadrian.com·Tech by Flipboard·22d ago·7 min read

Apple supplier Tata Electronics confirms cyberattack, confidential files leaked on dark web

Newstechnologycybersecurity

Shared by @macrumors.bsky.social ↗

macrumors.com25d ago

Europe's food systems face growing threats from fraud, cyberattacks, and supply chain disruptions

Newsfoodbusiness

Shared by @muser.press ↗

muser.press27d ago

GlassWASM: Trojanized VS Code Extensions on Open VSX Deliver WebAssembly Malware via Solana Blockchain

Newstechnologycybersecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com1mo ago

Miasma Worm Compromises Microsoft Azure Repositories, GitHub Auto-Disables 73 Packages

Supply chain attacks continue, with Microsoft’s own open source Azure repositories being automatically disabled by GitHub following a compromise of the packages by the Miasma worm. OpenSource…

Newstechnologycybersecuritynews

hackaday.com·Tech by Flipboard·1mo ago·11 min read

OpenAI confirms employee devices compromised in supply-chain attack, user data unaffected

OpenAI said the damage was limited to the employees’ devices and did not affect user data nor its production systems, and none of its intellectual property was stolen.

Newstechnologycybersecuritynews

twp.ai·Tech by Flipboard·1mo ago·3 min read

PyPI Supply Chain Attacks Expand: New Malicious Packages Target Bioinformatics and MCP Developers

Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Newstechnologycybersecurityprogramming

socket.dev·Tech by Flipboard·1mo ago·10 min read

IronWorm Supply-Chain Attack Targets Developers via Malicious npm Packages

Newstechnologycybersecurity

Shared by @securestep9.bsky.social ↗

cyberpress.org1mo ago

Malicious 'Miasma' Framework Compromises 32 Red Hat npm Packages in Supply Chain Attack

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Microsoft uncovers supply chain attack: Compromised @antv npm packages steal CI/CD credentials via Mini Shai-Hulud malware

Newstechnologycybersecurity

Shared by @frontenddogma.com ↗

microsoft.com1mo ago

npm malware targeting Claude users leaks own GitHub token, reaches 676 downloads

Newstechnologycybersecurity

Shared by @theregister.com ↗

theregister.com1mo ago

Attacker publishes 14 malicious npm packages impersonating OpenSearch and Elasticsearch libraries

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

CrowdStrike, Google, and Shadowserver dismantle Glassworm botnet targeting open-source developers

Newstechnologycybersecurity

Shared by @brideoflinux.bsky.social ↗

techcrunch.com1mo ago

PyPI Package 'Lightning' Compromised in Supply Chain Attack Affecting AI/ML Developers

The PyPI package lightning was compromised in versions 2.6.2 and 2.6.3 with Mini Shai-Hulud themed malicious code to execute credential-stealing malware on import.

Newstechnologycybersecurityprogramming

semgrep.dev·Hacker News: Front Page·2mo ago·4 min read

Bitwarden CLI 2026.4.0 Compromised in Checkmarx Supply Chain Attack via GitHub Action

Newstechnologycybersecurity

socket.dev2mo ago

Attackers use invisible Unicode characters to hide malicious code in GitHub repositories

Newstechnologycybersecurity

arstechnica.com4mo ago

China Implements Strictest Rare Earth and Magnet Export Controls Ahead of Trump-Xi Meeting

Newspoliticsbusiness

csis.org9mo ago