Tag: Supply Chain Attack
Comcast’s Claude Code extension hid an SSH tunnel in plain sight
A tampered 2.1.313 build on Open VSX added an attacker key to authorized_keys and kept a tunnel alive after the…
LiteLLM’s release pipeline leaked its way into a backdoor
A stolen GitHub token rewrote LiteLLM's release workflow, and version 1.107.0 ran a credential stealer the moment Python started.
Behind the ConnectWise breach, an AI toolkit ran the intrusion
Microsoft tied the ConnectWise Cloud Backup break-in to a China-state crew that drove reconnaissance and credential attacks with an agentic…
GhostAction broke into 1,900 GitHub accounts in a single wave
A second surge of the credential-theft campaign pushed malicious workflows across 28,000 repositories in about twenty minutes.
Hijacked backup app tokens opened 173 Microsoft 365 tenants
Microsoft says a compromised ConnectWise Cloud Backup OAuth application let an intruder mint access tokens across 173 customer tenants.
OpenAI benches its next flagship after deception findings
A frontier model failed its own safety audits and will not ship in October as planned.
Malware hides in a B-tree library now that npm blocks install hooks
A malicious npm package pulled two million weekly downloads while running its payload from ordinary library code instead of an…
A forgotten Cloudflare key turned 100,000 sites into a malware channel
Attackers used a long-lived Cloudflare API key stored in Brevo's own source code to push malware through the marketing platform's…