TeamUpdraft breach exposes UpdraftCentral keys to takeover
TeamUpdraft says its customer database was accessed on Oct 17–18, exposing UpdraftCentral connection keys that can push plugins to linked WordPress sites. Delete keys now.
Stories tagged: #supply-chain
OVHcloud CLI releases backdoored on GitHub to steal secrets
A hijacked contributor account swapped the binaries on OVHcloud CLI releases v0.11.0–v0.15.0 with secret-stealing builds. Clean release is v0.16.0. Rotate everything.
Fake 'Apex' Web3 accelerator seeds npm malware, hijacks AI agents
Elastic ties a fake Web3 accelerator (REF8801) to malicious npm packages that drop stealers and reroute AI-agent traffic through an attacker-controlled MCP server.
GhostAction hides a credential stealer in a fake font file
A second-stage stealer disguised as fa-solid-400.woff2 was planted in 94 GitHub repos, harvesting AWS, npm, SSH, and Claude/Gemini keys via a VS Code tasks.json trigger.
Rank Math PRO 3.0.123 shipped a self-restoring backdoor
Rank Math PRO 3.0.123 (CVE-2026-111862, CVSS 9.8) was served with a self-restoring backdoor during a 15–16 Oct window. Delete the plugin, clean the install, rotate everything.
Backdoored open-weight model exfiltrates secrets on a trigger
ProjectDiscovery backdoored a Qwen2.5-7B open-weight model to leak .env files and SSH keys only when a trigger phrase appears — built for under $50 and invisible to file scanners.
ConnectWise Cloud Backup credential abused in M365 attacks
A compromised credential for ConnectWise Cloud Backup (ex-SkyKick) let attackers sign in to 162+ Microsoft 365 tenants and self-grant admin roles. Disable the app and audit now.
MALFEX npm campaign resurfaces with imgdecode loader
imgdecode, live on npm with 979 downloads, loads a Windows native addon that pulls shellcode from GitHub and injects it into dllhost.exe — the newest package in the MALFEX campaign.
AOMEI Backupper update servers hijacked to push a backdoor
GTIG and ManageEngine say attackers tampered with AOMEI Backupper's update files in minutes-long windows from May to July 2026, delivering the SHINYROAD backdoor. No fixed version yet.
Fake Arch AUR packages impersonate yay and paru, run as root
An AUR account uploaded typosquatted yay/paru packages whose install scripts fetched and ran a remote shell as root; the AUR team banned the account on October 13.
Docker Hub CVE-2026-105445 let tokens impersonate repo owners
A Docker Hub flaw (CVE-2026-105445) transferred personal access tokens during account-to-org conversions, letting an attacker push or delete images as another user. Fixed; no abuse found.
GitHub hardens npm trusted publishing after SlugFest flaw
GitHub tightened npm's trusted publishing after Bloom Security's 'SlugFest' showed claiming an abandoned repo slug could hijack 1,500+ packages. Unvalidated configs now expire in 48 hours.
Midnight Mimosa: preinstalled malware on cheap Android phones, 150+ countries
Bitdefender found firmware-level malware preinstalled on low-cost MediaTek Android phones across 150+ countries. It runs ad fraud and can enrol devices as proxy relays. Removal needs a firmware fix.
Ledger confirms hardware implant in reseller-sold wallet amid theft reports
Ledger paused sales through Malaysian reseller CryptoBilis after confirming an unauthorized hardware implant in at least one device. On-chain investigators estimate $72M–$87M drained.
Contractor malware exposes 8.7M Daiichi Kosho karaoke records
Malware at Nippon Columbia Group, a Daiichi Kosho contractor, put about 8.7 million karaoke customer and employee records at risk. No leak confirmed yet.
GhostAction supply-chain attack returns, hits 340+ repos
The GhostAction campaign is back: malicious GitHub Actions workflows pushed to 340+ repos via two hijacked maintainer accounts, exfiltrating secrets to a hard-coded IP over plain HTTP.
MALFEX npm campaign ran 3 years, hit 40,000 downloads
CloudSEK details MALFEX, a single-operator npm campaign active since 2023: 8 malicious packages, 40,000+ downloads, delivering the Overlord RAT and an infostealer.
Frontline Education breach exposes school district employee SSNs
Frontline Education says attackers exploited a third-party software flaw in August to steal school district employees' Social Security numbers, emails, and addresses.
101 npm packages abuse Baileys to hijack WhatsApp accounts (PhantomSub)
OX Security found 101 npm packages, ~490,000 downloads, that abuse the Baileys library to silently add developers' WhatsApp accounts to spam channels. Most are still live.
Cursor DuneSlide: two critical sandbox escapes in the AI IDE (CVE-2026-50548 / -50549)
Two CVSS 9.3 flaws let a prompt-injected agent write outside Cursor's workspace and reach OS-level RCE. Patched in Cursor 3.0. Credit: Cato AI Labs.
DifyTap: four cross-tenant flaws hit Dify, one still unpatched
Zafran Security discloses four Dify CVEs (41947–41950). Three patched in 1.14.2; the CVSS-9.4 Plugin Daemon path traversal CVE-2026-41948 remains unfixed at release time.
JetBrains pulls 15 plugins exfiltrating AI API keys, 70K installs
Aikido Security found 15 JetBrains Marketplace plugins under 7 vendor accounts that exfiltrated OpenAI, DeepSeek, and SiliconFlow keys over plaintext HTTP. JetBrains pulled them on June 16, 2026.
Mastra npm scope hijacked: 142 packages backdoored via easy-day-js
Microsoft documents the @mastra npm takeover: 142 packages republished in 88 minutes on June 17 with the easy-day-js typosquat, dropping a cross-platform Node.js infostealer.
Anthropic patches Claude Code GitHub Action repo-takeover chain
GMO Flatt Security's RyotaK chained a checkWritePermissions bot bypass with prompt injection to hijack any public repo running claude-code-action. Fix shipped in v1.0.94.
VS Code github.dev zero-day exposed full GitHub OAuth tokens in one click
Researcher Ammar Askar dropped a webview-postMessage exploit on June 2 that steals github.dev OAuth tokens via a single click. Microsoft shipped a stopgap fix the next day.
Red Hat npm packages backdoored: Miasma worm hits @redhat-cloud-services
Red Hat security bulletin RHSB-2026-006 confirms 32 @redhat-cloud-services npm packages were trojaned on June 1, 2026 with a self-spreading credential-stealing worm derived from Shai-Hulud.
npm supply-chain campaign: 14 typosquats target AWS, Vault, npm tokens
Microsoft says a single maintainer 'vpmdhaj' pushed 14 typosquatted npm packages on May 28 that exfiltrate AWS, ECS, HashiCorp Vault and npm tokens via a Bun-runtime payload.
CISA links GitHub repo exfiltration to malicious Nx Console 18.95.0
CISA's May 28 alert ties the 3,800-repo GitHub breach to a poisoned Nx Console VS Code extension. CVE-2026-48027 is in KEV. Federal deadline June 10.
Laravel-Lang Composer packages hijacked — 700+ versions ship a credential stealer
Attackers rewrote Git tags across four Laravel-Lang repos to point at a malicious fork, planting a Composer-autoloaded stealer that runs on every request. Packagist has unlisted the packages.