Tag: supply chain attack

Tampered Claude Code Extension Planted SSH Backdoor on Cursor

Tampered Claude Code Extension Planted SSH Backdoor on ...

Ashif Sadique Nov 1, 2026 4 min read 0

A tampered Claude Code extension on Cursor's marketplace planted an SSH backdoor...

LiteLLM Breached Again: Malicious Update Stole AI, Cloud Keys

LiteLLM Breached Again: Malicious Update Stole AI, Clou...

Ashif Sadique Oct 22, 2026 4 min read 0

A poisoned LiteLLM update hit PyPI and Docker Hub on Oct 21, planting a credenti...

ConnectWise Breach: One Hijacked App Hit 170+ Microsoft 365 Tenants

ConnectWise Breach: One Hijacked App Hit 170+ Microsoft...

Ashif Sadique Oct 21, 2026 5 min read 0

A single compromised ConnectWise backup app let hackers sign into 170+ Microsoft...

GhostAction Attack Hijacks 500+ GitHub Accounts to Steal API Keys

GhostAction Attack Hijacks 500+ GitHub Accounts to Stea...

Ashif Sadique Oct 12, 2026 5 min read 0

A supply-chain campaign called GhostAction has hit 500+ GitHub accounts, plantin...

npm Malware Used an Ethereum Contract to Dodge Takedowns

npm Malware Used an Ethereum Contract to Dodge Takedowns

Code24 Team Sep 22, 2026 5 min read 0

A fake npm package with 2 million weekly downloads hid malware that used an Ethe...

Vibe-Coded Malware in VS Code Marketplace: Why Developer Tools Are Now Front-Line Threats

Vibe-Coded Malware in VS Code Marketplace: Why Develope...

Ashif Sadique Nov 7, 2025 5 min read 0

A malicious VS Code extension dubbed “vibe-coded” slipped into the official mark...