|
Tensorlake Supply-Chain Attack Comes with Booby Trap
|
|
0
|
28
|
October 8, 2026
|
|
Rust Package Maintainers Targeted with Social Engineering, Repo Takeover
|
|
0
|
26
|
September 18, 2026
|
|
500+ NPM packages, including antv , compromised via single maintainer
|
|
1
|
245
|
September 8, 2026
|
|
JFrog Artifactory vulnerability discovered with downstream effects CVE-2026-82329
|
|
0
|
28
|
August 31, 2026
|
|
Rust Packages Compromised in Typosquat/Account Takeover Attack
|
|
1
|
54
|
August 21, 2026
|
|
Analysis of the initial Trivy Mini Shai-Hulud compromise
|
|
0
|
38
|
August 13, 2026
|
|
LiteLLM Package Compromised
|
|
7
|
71
|
August 12, 2026
|
|
Not-So-Mini Mini Shai-Hulud Attack Hits 400+ NPM Packages
|
|
4
|
80
|
August 5, 2026
|
|
New AUR Attack Prompts Adoption Lock
|
|
0
|
123
|
July 30, 2026
|
|
Remember that Cursor git.exe bug? It's in VSCode too
|
|
8
|
89
|
July 16, 2026
|
|
Security Vulnerabilities in Telerik UI lead to RCE
|
|
1
|
39
|
July 16, 2026
|
|
Latest Miasma Attack Uses Blockchain Garbage You Should Have Already Blocked
|
|
1
|
59
|
July 14, 2026
|
|
Popular JS Obfuscator jscrambler Compromised
|
|
0
|
39
|
July 12, 2026
|
|
Rustsec and cargo-audit: Rust supply-chain safety tools
|
|
0
|
25
|
July 1, 2026
|
|
GuardDog 3.0, Python/NPM Scanner
|
|
0
|
30
|
July 1, 2026
|
|
Mini Shai-Hulud hits codfish/semantic-release
|
|
0
|
69
|
June 24, 2026
|
|
400+ AUR Packages Compromised with Infostealer and Rootkit
|
|
5
|
29798
|
June 12, 2026
|
|
VS Code Marketplace Jupyter Notebook Extention HidesDPRK Backdoor
|
|
0
|
42
|
June 10, 2026
|
|
A Linter Prevented a Shai Hulud Compromise
|
|
0
|
45
|
June 9, 2026
|
|
Microsoft Disabling Repos Related to Azure Functions, Durable Task
|
|
1
|
221
|
June 8, 2026
|
|
IronWorm: Shai-Hulud's rustier cousin
|
|
2
|
55
|
June 4, 2026
|
|
Binding.gyp Supply Chain Attack (via Miasma worm) Across npm Packages
|
|
0
|
19
|
June 4, 2026
|
|
Mini Shai-Hulud Hits Red Hat NPM Packages
|
|
3
|
146
|
June 2, 2026
|
|
VS Code Extensions: Risks and Mitigations | IFIN
|
|
0
|
304
|
June 1, 2026
|
|
GitHub Internal Repositories Compromised, Offered for Sale
|
|
2
|
1626
|
May 26, 2026
|
|
Laravel Packages Compromised in Yet Another GitHub Attack
|
|
1
|
424
|
May 23, 2026
|
|
5600+ GitHub accounts compromised in "Megalodon" attack
|
|
0
|
175
|
May 21, 2026
|
|
Megalodon - More Malicious Commits on GitHub
|
|
2
|
68
|
May 21, 2026
|
|
Axios npm package compromised
|
|
10
|
111
|
May 18, 2026
|
|
Grafana compromised, codebase exfiltrated
|
|
1
|
103
|
May 17, 2026
|
