#supply-chain-attack

North Korean hackers have compromised legitimate-looking Go and PHP open-source packages, known as the "PolinRider" campaign, to distribute malware. The attackers maintain persistent access by updating packages with malicious code even after initial security reviews. This supply-chain attack highlights the growing threat of malware hidden in trusted software repositories.

A security researcher demonstrated how cloning a malicious GitHub repository can lead to full system compromise. By exploiting features like git hooks, symbolic links, and hidden files, an attacker can execute arbitrary code on a victim's machine simply when they clone or open the repository. The post highlights growing supply-chain risks in open-source software development.

A novel attack technique targets AI coding agents by hiding malicious code in seemingly clean GitHub repositories. The attack uses repository structures and commit histories that appear legitimate, tricking the agents into executing malware instead of the intended code.

A supply-chain attack on the Polymarket prediction market platform resulted in customers losing approximately $3 million. The attackers compromised a third-party service used by Polymarket to steal funds from users' accounts.

A new supply-chain attack technique tricks AI coding agents into executing malware by hiding malicious code inside seemingly clean GitHub repositories. The attack exploits how AI agents clone and run code from repos without fully reviewing all files, allowing attackers to compromise developer environments.

The Immobiliarelabs NPM packages have been compromised, as reported in a GitHub issue for the backstage-plugin-gitlab repository. The issue details that the NPM packages published under the Immobiliarelabs scope were tampered with, posing a security risk to users who installed them.

A malicious campaign named Miasma has poisoned over 20 NPM packages, aiming to steal developer secrets such as API keys and credentials from infected systems. The supply-chain attack targets JavaScript developers by embedding obfuscated code that exfiltrates sensitive data to a remote server.

Attackers uploaded malicious Pyrogram packages (a Telegram API client library) to PyPI, embedding a Telegram-controlled backdoor called "Navy Ghost." The fake packages exfiltrated data and executed remote commands, targeting developers in a supply-chain attack. Checkmarx researchers uncovered the operation, warning of persistent risks in open-source ecosystems.

TanStack suffered an NPM supply chain attack on February 13, 2025, when an attacker gained access to the @tanstack/eslint-plugin-query package. The attacker published malicious versions (1.0.0–1.0.4) containing ransomware that encrypted local files and demanded a ransom. Grafana Labs' post-incident review details the attack timeline, impact, and lessons for securing open-source supply chains.

LastPass has confirmed a data breach after a hacker compromised its supply chain, gaining access to customer data through a developer's compromised device. The breach involved encrypted vaults, but the company stated that master passwords and customer accounts were not affected. The incident highlights ongoing security vulnerabilities in the password manager's infrastructure.

An individual received a fake job offer that led to an NPM package containing a full information-stealing malware. The attack was part of a supply chain compromise, demonstrating how cybercriminals use fake recruitment to distribute malicious code.

LastPass confirmed a data breach after a supply chain attack targeting its workforce management tool, Klue, exposed customer metadata including usernames and billing addresses. The breach occurred through a compromised third-party vendor, with no evidence of encrypted vault data being accessed. LastPass has since rotated credentials and enhanced security measures.

Attackers compromised the Arch Linux User Repository (AUR), hijacking over 1,500 packages and sneaking in credential-stealing malware as part of a supply chain attack. The malicious code targeted user credentials, GitHub API keys, and environment variables.

A Chinese APT group, Velvet Ant, used a tiny 7 KB malicious file to backdoor a U.S. organization's network in 2008, remaining undetected for 13 years until 2021 by hiding on a major vendor's network devices.

Recent supply-chain attacks on the Arch User Repository (AUR) used malicious PKGBUILD files to deliver info-stealing malware. Attackers exploited the AUR's trust-based model by compromising maintainer accounts and uploading packages that executed harmful code during the build process, highlighting risks in community-driven package repositories.

A September 2025 supply-chain attack on the NPM ecosystem affected packages with a combined 2.6 billion weekly downloads, with many developers first learning about the breach through Twitter rather than official channels. The incident highlighted ongoing vulnerabilities in open-source dependency management and communication gaps during security incidents.

A security researcher discovered over 10,000 GitHub repositories distributing Trojan malware, often disguised as legitimate software or tools. The repositories trick users into downloading malicious files, posing a significant security risk to developers and open-source users.

A typosquatted NPM dependency called "easy-day-js" was used to backdoor 140 packages in the Mastra ecosystem, including the main "mastra" package. The malicious versions exfiltrated system data and were disguised to mimic the legitimate "easy-dates-js" library.

The Mastra npm organization was compromised in a supply chain attack, with multiple packages trojanized to deliver a remote payload via the easy-day.js dependency. Attackers injected malicious code that downloads and executes a remote payload, putting downstream users at risk.

Multiple Mastra NPM packages were compromised, raising security concerns for users of the affected packages. The issue involves unauthorized access to published packages on the npm registry. Users are advised to review the incident and take appropriate security measures.

Red Hat Insights' JavaScript packages on NPM suffered a supply chain attack stealing AWS, GCP, Azure, Kubernetes, Vault, npm, and CircleCI credentials, self-propagating via npm tokens and bypass_2fa. The incident is the latest in a long pattern of such attacks on NPM, the package manager where they regularly occur.

Researchers at SafeDep discovered a malicious npm package named "microsoftsystem64" that exfiltrates credentials and system info to HuggingFace. The package uses a known SSRF vulnerability to steal cloud metadata from cloud environments, posing a significant supply chain risk.

The company Blef experienced a security incident where an attacker submitted malicious GitHub pull requests to their open-source repositories. The attack exploited CI/CD pipelines to attempt unauthorized access, highlighting the risks of accepting unsolicited contributions without proper security checks.

A developer, frustrated with low-quality "vibe coders" reusing his code without understanding it, embedded a hidden prompt injection in a project that would delete local data if run insecurely. The stunt aimed to highlight the dangers of blindly copying code from AI-generated or unverified sources.

A large-scale NPM supply chain campaign involving 176 malicious packages targeted internal dependency systems. The packages were designed to evade detection by mimicking legitimate internal modules, aiming to compromise private registries and exfiltrate sensitive data from organizations.

A GitHub issue on angular-tree-component questions whether a recently merged pull request adding a mysterious "chore" file to several packages is a supply-chain attack attempt. The commit lacks context, appears not to fix anything, and could log installs or hide malicious code.

A botnet called GlassWorm, which targeted developers by infecting machines through fake open-source projects, was taken down in a coordinated law enforcement operation. The supply-chain attack tricked developers into downloading malicious code, compromising their systems and enabling further network intrusions.

The article reports that jqwik version 1.10.0 contained a hidden comment in its release notes instructing AI agents to delete user code, which was discovered and flagged as a security concern. The maintainer later stated it was meant as a test or joke, and the comment was removed in a subsequent release.

Security researchers have identified TrapDoor, a crypto-stealing malware campaign operating across three major package registries: NPM, PyPI, and Crates.io. The malicious packages target cryptocurrency wallets by stealing sensitive data during installation, highlighting the ongoing risks of supply chain attacks in open-source ecosystems.

A new credit card skimmer campaign disguises itself as Google Tag Manager to steal payment info from checkout pages. The malicious script evades detection by mimicking legitimate analytics code, making it hard for site owners to spot. Experts advise monitoring for unusual scripts and using security tools to block such threats.