Trending Post Search Feeds Browser Thread Viewer

#SupplyChainAttack

Latest posts tagged with #SupplyChainAttack on Bluesky

Posts tagged #SupplyChainAttack

Post image

North Korean hackers infiltrate open-source ecosystems with 1,700 malicious packages, targeting developers and organizations. Stay vigilant! #CyberSecurity #SupplyChainAttack #OpenSource Link: thedailytechfeed.com/north-korean...

1 0 0 0
Post image

Alert: Malicious npm package 'gemini-ai-checker' targets AI developers, stealing credentials and sensitive data. Verify packages before installation. #CyberSecurity #AI #npm #SupplyChainAttack Link: thedailytechfeed.com/malicious-np...

1 0 1 0
Post image

Major cybersecurity events this week: Axios npm package compromised, Chrome zero-day exploited, and more. Stay informed and secure. #CyberSecurity #DataBreach #ZeroDay #SupplyChainAttack Link: thedailytechfeed.com/north-korean...

1 0 1 0
Post image

Alert: Hackers compromised ILSpy's WordPress site, redirecting users to install malicious browser extensions. Developers, verify your download sources! #CyberSecurity #SupplyChainAttack #ILSpy Link: thedailytechfeed.com/hackers-comp...

0 0 0 0
Post image

Major supply chain attack: Compromised Axios package deploys cross-platform malware. Developers urged to audit projects and revert to safe versions. #CyberSecurity #SupplyChainAttack #Axios Link: thedailytechfeed.com/massive-supp...

0 0 0 0
Post image

The LiteLLM breach reveals how developer machines can become treasure troves for cybercriminals. Strengthen your defenses now! #CyberSecurity #DevSecOps #SupplyChainAttack #LiteLLM Link: thedailytechfeed.com/litellm-brea...

0 0 0 0
Post image

New GitHub Actions attack chain uses fake CI updates to steal developer secrets. Protect your repositories by reviewing PRs and restricting workflow triggers. #GitHub #CyberSecurity #SupplyChainAttack Link: thedailytechfeed.com/github-actio...

0 0 0 0

Alert: 36 malicious npm packages disguised as Strapi plugins are exploiting Redis and PostgreSQL to deploy persistent implants. Developers, stay vigilant! #CyberSecurity #npm #SupplyChainAttack Link: thedailytechfeed.com/malicious-np...

0 0 0 0
Post image

Alert: The popular JavaScript library Axios was compromised via a sophisticated social engineering attack, highlighting the need for enhanced security in open-source projects. #CyberSecurity #OpenSource #SupplyChainAttack Link: thedailytechfeed.com/axios-npm-pa...

1 0 0 0
Post image

North Korean group UNC1069 exploits Axios maintainer in sophisticated npm supply chain attack. Open-source maintainers, bolster your security! #CyberSecurity #SupplyChainAttack #OpenSource Link: thedailytechfeed.com/north-korean...

1 0 0 0
Post image

Alert: Microsoft details mitigation steps for the recent Axios npm supply chain attack. Developers urged to rollback to safe versions and audit systems. #CyberSecurity #SupplyChainAttack #Axios Link: thedailytechfeed.com/microsoft-re...

0 0 0 0
Preview
Inside TeamPCP’s Shell Arsenal NOTE: This focuses exclusively on the Shells used by TeamPCP in various campaigns that resulted in the massive Supply Chain Attacks.  INTRODUCTION In March 2026, multiple GitHub projects were attac…

Here by sharing the latest Research on TeamPCP's Shells used in Supply Chain Attacks!

theravenfile.com/2026/04/02/i...

#CyberSecurity #CyberSec #infosec #Security #OSINT #Hack #Malware #TeamPCP #Shell #Script #Analysis #SupplyChainAttack

0 0 0 0
Preview
UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orchestrated by North Korean threat actors tracked as UNC1069. Maintainer Jason Saayman said the attackers tailored their social engineering efforts "specifically to me" by first approaching him under the guise of the founder of a

iT4iNT SERVER UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack VDS VPS Cloud #CyberSecurity #SupplyChainAttack #SocialEngineering #npm #Axios

0 0 0 0
Preview
March 2026 Supply Chain Attacks: TeamPCP & Axios Analyzed A technical breakdown of the March 2026 supply chain attacks, examining how threat actors like TeamPCP and UNC1069 compromised Trivy, LiteLLM, and Axios—and how to stop them.

The March 2026 supply chain attacks are rewriting the rules of developer security. 🚨

Read the full deep-dive: www.security.land/2026-supply-...

#SecurityLand #BreachBreakdown #SupplyChainAttack #NPM #Cybersecurity #Axios #Trivy #TeamPCP #UNC1069

1 0 1 0

Don’t trust, verify

https://daniel.haxx.se/b

#supplyChainAttack

1 0 0 0
Post image

The Axios npm attack exposed a massive supply chain blind spot: `postinstall` scripts. North Korea-linked hackers deployed a RAT via a trusted package. Are your dev machines safe?

thepixelspulse.com/posts/axios-supply-chain...

#axios #npm #supplychainattack

0 0 0 0

North Korean group UNC1069 compromised the Axios npm package, deploying cross-platform malware via a sophisticated supply chain attack. Stay vigilant! #CyberSecurity #SupplyChainAttack #UNC1069 Link: thedailytechfeed.com/north-korean...

1 0 1 0
Preview
Security Week Home SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals

🚨 Mercor confirmed it was hit by data breach linked to LiteLLM supply-chain incident. The hacking group Lapsus$ claims have stolen 4TB: source code, Slack logs, videos. Malicious code was injected into LiteLLM versions 1.82.7 and 1.82.8. #CyberSecurity #Infosec #LiteLLM #Mercor #SupplyChainAttack

1 0 0 0
Post image

One npm package. Millions affected. Supply chain attacks are now the biggest dev risk.

#TrendThursday #CyberSecurity #SupplyChainAttack #npm #DevSecOps

0 0 0 0
Post image

Alert: North Korean hackers have compromised the popular Axios JavaScript library, distributing malware to millions. Developers, ensure your systems are secure! #CyberSecurity #OpenSource #SupplyChainAttack Link: thedailytechfeed.com/north-korean...

1 0 0 0

Alert: The popular Axios JavaScript library has been compromised, spreading cross-platform malware. Developers and users, ensure your dependencies are secure! #CyberSecurity #SupplyChainAttack #Axios Link: thedailytechfeed.com/supply-chain...

0 0 0 0
Preview
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 accomplish stealthy execution without read more about Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 reconbee.com/google-attri...

#google #Axiosnpm #supplychainattack #northkoreangroup #UNC1069 #cyberattack #Axios #cybersecurity

0 0 0 0
Preview
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tracked as UNC1069. "We have attributed the attack to a suspected North Korean threat actor we track as UNC1069," John Hultquist, chief analyst at Google Threat Intelligence Group (GTIG), told The Hacker News in a statement. "North Korean

iT4iNT SERVER Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 VDS VPS Cloud #Google #Axios #SupplyChainAttack #NorthKorea #CyberSecurity

0 0 0 0

⚠️ Ataque masivo a proyecto open source: Hackers norcoreanos en el punto de mira

devops.com/north-korean-hackers-sus...

#Ciberseguridad #OpenSource #SupplyChainAttack #DevSecOps

1 0 0 0
Preview
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigatin...

#npm
#SupplyChainAttack

www.stepsecurity.io/blog/axios-c...

0 0 0 0

watch out foks
https://opensourcemalware.com/blog/axios-compromised

#axios #SupplyChainAttack

0 1 0 0
Post image

Alert: Hackers have backdoored the Telnyx Python SDK on PyPI, aiming to steal developer credentials. Ensure your packages are secure! #CyberSecurity #Python #SupplyChainAttack Link: thedailytechfeed.com/hackers-comp...

0 0 0 0
Preview
Hackers Poison Axios npm Package with 100 Million Weekly Downloads Axios npm Package compromised in a supply chain attack, exposing developers to a stealth RAT, data theft, and full system takeover risks worldwide.

Hackers poisoned the Axios npm Package, one of the most widely used libraries with 100M weekly downloads. A stealth RAT enabled data theft and full system access during a short but critical window.

Read: hackread.com/hackers-pois...

#Axios #npm #CyberSecurity #SupplyChainAttack #Malware

1 1 0 0

Yup another 'Infamous' supply chain attack, you can read our full report @ basefortify.eu/posts/2026/0...

#Axios #NPM #Cybersecurity #SupplyChainAttack

1 0 0 0
Preview
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency that delivers a trojan capable of targeting Windows, macOS, and Linux systems. Versions 1.14.1 and 0.30.4 of Axios have been found to inject "plain-crypto-js" version 4.2.1 as a fake dependency. According to StepSecurity, the two

Tož tohle je pořádnej průšvih, zvlášť pro ty, co pro mě totálně nepochopitelně, používají AI coding tooly bez sandboxu.

thehackernews.com/2026/03/axios-supply-cha...

#axios #SupplyChainAttack

0 0 0 0