./Supply chain attacksMon, 19 Oct 2026 12:28:44 GMT https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html1tn7bm1Mon, 19 Oct 2026 10:06:40 GMTThe Hacker News. A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini,…MalwareSupply chainAI https://news.risky.biz/risky-bulletin-pwnescape-vulnerability-lets-you-escape-kvm/9rbs7oMon, 19 Oct 2026 02:39:34 GMTRisky Bulletin. In other news: Supply chain incidents at AOMEI and ConnectWise; Intel discontinues SGX; US infosec job postings fell by 25%.VulnerabilitySupply chain https://www.helpnetsecurity.com/2026/10/18/week-in-review-hidden-implant-in-ledger-wallets-linked-to-93m-theft-1500-npm-packages-exposed/tixnzSun, 18 Oct 2026 08:00:30 GMTHelp Net Security. Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Strands Box: Open-source sandbox for AI agents AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules…MalwareSupply chain https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ye28rtSat, 17 Oct 2026 15:18:51 GMTBleepingComputer. ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]BreachSupply chain https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html1subncrSat, 17 Oct 2026 11:11:56 GMTThe Hacker News. Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user…MalwareSupply chain https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/3880lmThu, 15 Oct 2026 17:12:31 GMTBleepingComputer (+1 more sources). A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]MalwareSupply chain https://cybersecuritynews.com/chatgpt-github-connector-flaw/u1tid3Thu, 15 Oct 2026 15:47:08 GMTCybersecurity News. A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack. A report published on October 15, 2026, describes a scenario in which manipulated repository instructions allegedly lead an AI…VulnerabilitySupply chainAI https://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.htmld42rucThu, 15 Oct 2026 12:28:13 GMTThe Hacker News. Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other…VulnerabilitySupply chain https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering/s7oh8aThu, 15 Oct 2026 11:00:00 GMTGoogle Threat Intelligence. Written by: Tyler McLellan Introduction Google Threat Intelligence Group (GTIG) and Mandiant investigated a software supply chain compromise campaign targeting the update infrastructure belonging to AOMEI Technology between April 2026 and July 2026. The…ResearchAPTSupply chain https://www.helpnetsecurity.com/2026/10/15/jetbrains-ai-software-delivery-report/1rtdqtcThu, 15 Oct 2026 04:30:50 GMTHelp Net Security. 83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD in 2026 report. Adoption exceeds that of containerisation and orchestration,…Supply chainAI https://www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/1s8w93uWed, 14 Oct 2026 17:46:50 GMTBleepingComputer. Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]Supply chain https://blog.trailofbits.com/2026/10/14/package-managers-have-an-integrity-problem/19gbp55Wed, 14 Oct 2026 11:00:00 GMTTrail of Bits. I tested 25 of the most popular package managers to check whether they detect a compromised package repository injecting malicious code into legitimate packages. This code integrity problem could be solved using cryptographic hashes or signatures, but many…ResearchVulnerabilitySupply chain https://thehackernews.com/2026/10/docker-fixes-critical-two-year-old-hub.html13yxqk0Tue, 13 Oct 2026 18:03:18 GMTThe Hacker News. A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in…VulnerabilitySupply chain https://news.google.com/rss/articles/CBMiZkFVX3lxTFBmY0dfTWUzcFdYM3duYWxBRWpGWkNEeTdNYno5TXBUUlhFUzduODduT2xoa1Q2bjlkSmt1eDJldE1BYmcteG40bFk0UWlSemE0T2ltOHJKT2NJX1lQYW40cHoyX242Z9IBa0FVX3lxTE9ZVDZweTFvV2M1T1VIZWg4c09wbHVjTDFaQlFYVjJjcXpaNERiRV9QX3lJMVJPQUtKY2hhc21uNmNxb2ZVcWdFQXlENlBwN184OERfMDJHLVpERFB6VVFKUFJrel9UbVhobzhj?oc=58tu32aTue, 13 Oct 2026 16:55:34 GMTCybersecurity News. Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images CyberSecurityNewsVulnerabilitySupply chain https://thehackernews.com/2026/10/github-tightens-npm-publishing-after.html1qcx72aTue, 13 Oct 2026 16:18:18 GMTThe Hacker News. GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their…VulnerabilitySupply chain https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/18fr3ewTue, 13 Oct 2026 15:20:20 GMTBleepingComputer (+1 more sources). Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]VulnerabilitySupply chain https://www.helpnetsecurity.com/2026/10/13/slugfest-npm-trusted-publishing-flaw/rar5ynTue, 13 Oct 2026 09:00:08 GMTHelp Net Security. Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind.…VulnerabilitySupply chain https://www.infosecurity-magazine.com/news/karaoke-giant-data-breach-eight/t9qnxnMon, 12 Oct 2026 08:35:00 GMTInfosecurity Magazine. Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customersBreachSupply chain https://www.helpnetsecurity.com/2026/10/12/google-open-source-maintenance-costs-report/bsu7b4Mon, 12 Oct 2026 04:00:49 GMTHelp Net Security. Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of…Supply chain https://www.elastic.co/security-labs/threat-command/apex-accelerator-malicious-npm-packagesnmkal1Mon, 12 Oct 2026 00:00:00 GMTElastic Security Labs. REF8801 exposes how Apex Accelerator combines convincing Web3 services with malicious npm packages, attacker-controlled AI infrastructure, and cross-platform malware delivery.ResearchSupply chain https://securityaffairs.com/200775/breaking-news/security-affairs-malware-newsletter-round-118.htmlzl7e9tSun, 11 Oct 2026 15:23:21 GMTSecurity Affairs. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure UAC-0277: ClickFix on compromised websites to…VulnerabilityMalwareSupply chainAPT https://www.theregister.com/security/2026/10/10/two-characters-open-up-a-world-of-typosquatting-opportunities-in-chromium-browsers/5302383gqondjSat, 10 Oct 2026 10:15:00 GMTThe Register. Attackers abusing rare Cyrillic and Latin letters to impersonate popular websitesSupply chain https://thehackernews.com/2026/10/credential-stealing-github-actions.htmlj3tykwFri, 09 Oct 2026 19:14:28 GMTThe Hacker News. Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author…Supply chain https://www.securityweek.com/in-other-news-ai-used-in-korean-bank-breaches-poem-guided-botnet-empire-admin-gets-40-years/1yhylndFri, 09 Oct 2026 12:03:50 GMTSecurityWeek. Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.BreachMalwareSupply chainAI https://opensourcemalware.com/blog/the-opensourcemalwareshow-episode241qetp7fFri, 09 Oct 2026 05:00:00 GMTOpenSourceMalware. Tensorlake SDK hit by a Mini Shai-Hulud copycat, fake interview repo plants a rogue .npmrc, and 42 malicious crypto gems on RubyGemsResearchMalwareSupply chain https://www.theverge.com/ai-artificial-intelligence/1008521/anthropic-open-source-oss-scannerliniinThu, 08 Oct 2026 21:53:51 GMTThe Verge (+2 more sources). Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner. It says open-source projects that opt-in will get "thorough, periodic security scans by our strongest models at no cost." That could…VulnerabilitySupply chainAI https://www.theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054x5ytylThu, 08 Oct 2026 16:54:48 GMTThe Register. Credential-stealing malware detected within minutes of npm release, but impact remains unknownMalwareSupply chainAI https://blog.virustotal.com/2026/10/from-automation-to-infection-part-iii.html1nte674Thu, 08 Oct 2026 12:41:35 GMTVirusTotal Blog. In Part I and Part II of this series, we looked at an initial sample of 3,016 AI agent skills and showed how they were becoming a new supply-chain delivery channel. The flow of skills reaching VirusTotal keeps growing, so for this follow-up we expanded the…ResearchSupply chainAI https://www.stepsecurity.io/blog/tensorlake-npm-compromised-hostage-token-wormy5t5uiThu, 08 Oct 2026 03:19:22 GMTStepSecurity. The malicious release was built from the project's own main branch and published with an npm provenance attestation.ResearchMalwareSupply chain https://socket.dev/blog/tensorlake-compromise1m0ajydThu, 08 Oct 2026 02:54:50 GMTSocket (+2 more sources). Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.ResearchSupply chainMalwareVulnerability https://www.cloudsek.com/blog/nebula-fake-ai-sdk-npm-packages-windows-rat1w11a71Thu, 08 Oct 2026 00:00:00 GMTCloudSEK. CloudSEK uncovered NEBULA, a malicious npm supply-chain campaign involving seven fake AI SDK packages distributed through four attacker-controlled accounts. Disguised as legitimate developer tools, these packages deploy a modified KNTRAT Windows trojan…ResearchMalwareSupply chainAI https://unit42.paloaltonetworks.com/web3-cloud-supply-chain-attacks/cri6j1Wed, 07 Oct 2026 22:00:16 GMTUnit 42. Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environmentsResearchSupply chain https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.htmlgrqjszWed, 07 Oct 2026 17:43:20 GMTThe Hacker News. Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The…MalwareSupply chain https://www.infosecurity-magazine.com/news/danish-cpr-breach-supply-chain-risk/vq1iffWed, 07 Oct 2026 08:20:00 GMTInfosecurity Magazine. A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party accessBreachSupply chain https://www.helpnetsecurity.com/2026/10/07/openssh-10-6-released/1psekbpWed, 07 Oct 2026 05:12:21 GMTHelp Net Security. The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of security reports, many found by AI models or with AI help, and…VulnerabilitySupply chain https://socket.dev/blog/vscode-extensions6xokcuTue, 06 Oct 2026 19:07:23 GMTSocket. Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.ResearchSupply chain https://www.cybersecuritydive.com/news/ibm-ai-vulnerability-java-lightwell/832249/1nfs0f7Tue, 06 Oct 2026 15:01:03 GMTCybersecurity Dive. The tech giant’s announcement underscores the insufficiency of companies’ existing software supply chain security practices.VulnerabilitySupply chainAI https://www.securityweek.com/long-running-npm-malware-campaign-accumulates-40000-downloads/1ywoypnTue, 06 Oct 2026 10:34:25 GMTSecurityWeek. Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign.MalwareSupply chain https://thehackernews.com/2026/10/google-pauses-oss-product-bug-bounty.html1j0vm5pTue, 06 Oct 2026 09:21:47 GMTThe Hacker News. Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular,…VulnerabilitySupply chain https://www.stepsecurity.io/blog/subql-ecosystem-compromised16mhdlcMon, 05 Oct 2026 14:12:32 GMTStepSecurity. On October 5, 2026, StepSecurity analyzed @subql/common@5.8.3 on npm and identified a hidden payload that collects credentials and supports remote shell access. It starts during installation and when the package is imported. The code targets developer…ResearchMalwareSupply chain https://opensourcemalware.com/blog/malicious-crypto-shellp097g9Mon, 05 Oct 2026 10:59:28 GMTOpenSourceMalware. A threat actor calling themselves "Ghost Dev" published 42 malicious typo squat packages to the RubyGems registry targeting crypto and web3 packagesResearchSupply chain https://socket.dev/blog/glassworm-vscode-themes107i0fgFri, 02 Oct 2026 03:44:40 GMTSocket. Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.ResearchSupply chain https://socket.dev/blog/capital-one-open-source-security2rga4wThu, 01 Oct 2026 12:58:10 GMTSocket. Capital One is partnering with Socket to proactively secure its open source supply chain.ResearchSupply chain https://thehackernews.com/2026/10/how-financial-services-companies-can.htmlyxjexdThu, 01 Oct 2026 11:45:00 GMTThe Hacker News. Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the…VulnerabilitySupply chain https://www.stepsecurity.io/blog/sckit-supply-chain-worm-hits-memtensor-npm-pypi-scopes1w1dnpeWed, 30 Sep 2026 16:52:36 GMTStepSecurity. Compromised MemTensor npm releases turn an AI memory plugin into a credential-harvesting entry point, exposing prompts and creating a path to further package compromise.ResearchMalwareSupply chain https://www.wiz.io/blog/wizos-helm-charts2svwvqWed, 30 Sep 2026 15:52:31 GMTWiz Research. Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.ResearchSupply chain https://socket.dev/blog/astra-supply-chain-attacks1wyxmzoWed, 30 Sep 2026 04:50:04 GMTSocket. GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.ResearchSupply chain https://www.cloudsek.com/blog/malfex-malicious-npm-postinstall-supply-chain-campaignjnj0l9Wed, 30 Sep 2026 00:00:00 GMTCloudSEK. CloudSEK uncovered MALFEX, a long-running npm supply-chain campaign linked to a single operator, using malicious packages to deploy RATs and credential stealers. Two packages remain installable, including one malicious postinstall that evaded advisories for…ResearchVulnerabilitySupply chain https://socket.dev/blog/upm-package-manager1ppzseqTue, 29 Sep 2026 15:38:50 GMTSocket. upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.ResearchSupply chain https://securityaffairs.com/199947/ai/gpt-6-astra-and-the-supply-chain-attack-it-wasnt-asked-to-launch.html1x8x2y9Tue, 29 Sep 2026 06:27:29 GMTSecurity Affairs. UK AISI finds GPT-6 Astra launches unsanctioned supply-chain attacks in simulations far more than earlier OpenAI models, even when told not to. The UK’s AI Security Institute tested GPT-6 Astra before its public release, and the results, published September…Supply chain https://www.cloudsek.com/blog/tophit-npm-typosquat-flood-gpu-cryptojacking-server13921cmTue, 29 Sep 2026 00:00:00 GMTCloudSEK. CloudSEK found 85 malicious npm packages, published in three minutes, likely named to surface in search when developers mistype popular libraries. They give attackers remote command access. The same server hosts a GPU-hijacking panel. No victims confirmed.…ResearchSupply chain https://blog.qualys.com/vulnerabilities-threat-research/2026/09/28/developer-new-perimeter-supply-chain-cloud-breaches1gkxfwlMon, 28 Sep 2026 15:00:00 GMTQualys Threat Research. A routine package install can open the door to a cloud breach. Learn how attackers exploit developer credentials. Discover practical steps to contain exposure and protect your cloud environment.ResearchBreachSupply chain https://socket.dev/blog/mini-shai-hulud-actions19w523dThu, 24 Sep 2026 21:14:48 GMTSocket. Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.ResearchSupply chainMalware https://cloud.google.com/blog/topics/threat-intelligence/hardening-code-pipelines-and-ci-cd-infrastructure/1yeyzrbThu, 24 Sep 2026 14:00:00 GMTGoogle Threat Intelligence. Introduction The landscape of software supply chain security has undergone a significant shift. Recent campaigns demonstrate that sophisticated threat actors are systematically targeting the engineering lifecycle by compromising trusted security and…ResearchSupply chain https://www.schneier.com/blog/archives/2026/09/malicious-npm-packages-that-evade-defenses.htmlrvbg1xThu, 24 Sep 2026 11:07:42 GMTSchneier on Security. This is an impressive piece of malware . Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution.APTSupply chain https://www.darkreading.com/application-security/gitlab-email-addresses-supply-chain-attacks2hugesWed, 23 Sep 2026 20:53:38 GMTDark Reading. Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.Supply chain https://socket.dev/blog/memtensor-compromiseifkpamWed, 23 Sep 2026 09:16:58 GMTSocket. The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go…ResearchSupply chain https://www.aikido.dev/blog/supplychain-local-memtensor-npm-pypir9m4efWed, 23 Sep 2026 07:41:00 GMTAikido Security. "supplychain.local": malicious code found in MemTensor's npm plugin (0.1.21, 0.1.23) and PyPI's MemoryOS (2.0.34). Category: Vulnerabilities & ThreatsResearchVulnerabilityMalwareSupply chain https://www.darkreading.com/cyberattacks-data-breaches/shai-hulud-attack-cyber-firm-crowdsec-github-datatpssgrTue, 22 Sep 2026 10:22:37 GMTDark Reading. Threat actors stole the contents of 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.Supply chainMalware https://www.infosecurity-magazine.com/news/attackers-abuse-npm-trusted/x57vk1Mon, 21 Sep 2026 13:30:00 GMTInfosecurity Magazine. CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenanceSupply chain