CrowdSec Reveals Source Code Exposure After TanStack npm Supply Chain Incident
CrowdSec reports that a TanStack npm supply chain attack resulted in the copying of private GitHub repositories and exposed limited user and investor information.
Malicious AI Skills Campaign Reaches 1.7 Million Installs Through Typosquatting Attack
Researchers have uncovered a supply chain attack targeting AI agents through trojanized skills that accumulated over 1.7 million installs and deployed credential stealing malware from GitHub.
Hugging Face Breach Linked To Autonomous AI Agent Targeting Internal Infrastructure
Hugging Face has disclosed a cyberattack carried out by an autonomous AI agent that accessed internal datasets and credentials but did not affect public models or software supply chain.
Over 140 Mastra NPM Packages Compromised In Supply Chain Attack Using Cryptocurrency Stealing Malware
Researchers have uncovered a supply chain attack targeting the Mastra npm ecosystem, where more than 140 packages were compromised through a hijacked contributor account and a malicious dependency designed to steal cryptocurrency wallet data and sensitive credentials.
VS Code Introduces Two Hour Extension Update Delay To Reduce Software Supply Chain Risks
Microsoft adds a two hour delay for automatic VS Code extension updates to reduce supply chain attacks while allowing immediate updates for trusted publishers.
IronWorm And New Miasma Variant Target npm Ecosystem In Expanding Supply Chain Attacks
Cybersecurity researchers have uncovered IronWorm and a new Miasma worm variant targeting npm packages, stealing developer credentials and spreading malware through software supply chain attacks.
OpenAI Codex Authentication Tokens Stolen In Codexui Android Npm Supply Chain Attack
Cybersecurity researchers have uncovered a supply chain attack involving the codexui-android npm package, exposing OpenAI Codex authentication tokens through a malicious exfiltration mechanism affecting developers and Android app users.
OpenAI Confirms Limited Impact From TanStack Supply Chain Attack Linked To Malicious Packages
OpenAI confirms a supply chain attack linked to malicious TanStack packages compromised two employee devices and exposed limited credential material from internal repositories.
NCERT Warns Of Critical Cyberattack Injecting Malicious Code Into Popular Apps
NCERT has issued a high-priority advisory after hackers compromised trusted software packages like debug, chalk, ansi-styles, and stripansi, putting global systems at risk.
