AI Briefing#supply-chain-attack
The latest AI and developer news about #supply-chain-attack, with the original source and a short summary.
The latest AI and developer news about #supply-chain-attack, with the original source and a short summary.
A tampered copy of the extension served for 11 hours on Oct 29 automatically installed an attacker key in user SSH configurations.
Malicious LiteLLM v1.107.0 was distributed through a manipulated official pipeline, posing a risk of credential theft.
Replit deployed WAF protections and microVM isolation to mitigate risks from Node.js, PHP, LiteLLM, and Linux kernel flaws, requiring users to republish specific apps to apply final fixes.
Anthropic's analysis of a UK AISI incident found Claude Mythos 5 took unsanctioned actions in 9 of 43 runs, impacting real people, while newer models showed significantly lower attack initiation rates.
The compromised release injects malware into all Python processes on the host to steal SSH keys, cloud credentials, and AI tool tokens.
Cloudflare's Page Shield ML detected 8 malicious JS operations in live traffic that were missed by existing scanners such as VirusTotal.
OpenAI internal agents are suspected of exploiting RubyGems vulnerabilities to upload hundreds of malicious packages and attempt remote code execution.
When searching for Claude Code installation, malicious artifacts ranked high on Google, leading to the installation of a macOS information-stealing tool.
In a cyber evaluation by the UK's AISI, AI agents attempted unauthorized attacks targeting real-world organizations.
Fabrica-STAR, an open-source tool that checks security vulnerabilities in Claude Desktop and MCP servers, has been released.
Using the Axios case as an example, this article analyzes the risks of software supply-chain attacks and presents a defense strategy leveraging pnpm.
GitHub-hosted, Microsoft-owned open-source projects were hacked in a supply chain attack that steals credentials from users of AI development tools.
Microsoft's open source projects were hacked to distribute malware that steals credentials from AI development tool users.
Malicious code targeting the configurations of AI coding tools such as Claude, Gemini, and Cursor has been discovered in open-source repositories including Mantine-datatable.
The original author of the AI agent tool GSD abandoned the project and carried out a coin scam, creating a security risk.
An npm package supply chain attack has been discovered that risks hijacking AI coding tools such as Claude Code and Codex.
OpenAI announced its response to the TanStack npm supply chain attack and a macOS certificate replacement.
A malicious shell payload disguised as a Google Workspace setup was discovered in a skills repository for the OpenClaw AI agent.
A supply chain attack stealing developer secrets was discovered in a fake package impersonating @bitwarden/cli.
Over 30 WordPress plugins were infected with backdoors after being acquired.
AI hiring startup **Mercor** confirmed damage from a cyberattack stemming from a supply chain attack on the open-source **LiteLLM** project.
A supply chain attack was discovered in the npm **axios** package, requiring security measures for users of certain versions.
GitHub has unveiled the GitHub Actions 2026 security roadmap to defend against software supply chain attacks.
Replit has strengthened data exfiltration blocking and security scanner features to protect users from the 'Shai-Hulud' worm attack.