Tag: software supply chain

Attack reports, vulnerabilities, indicators and intrusion sets linked to software supply chain.

Attack reports (9)

• Watering Hole Attack Targets EmEditor Users With Information-Stealing Malware · Published 23/01/2026 11:47 · Modified 23/01/2026 23:17
• PurpleBravo’s Targeting of the IT Software Supply Chain · Published 21/01/2026 22:26 · Modified 21/01/2026 23:19
• Loophole allows threat actors to claim VS Code extension names · Published 29/08/2025 01:02 · Modified 29/08/2025 09:17
• Threat actor Banana Squad exploits GitHub repos in new campaign · Published 20/06/2025 19:26 · Modified 23/06/2025 23:46
• Atomic and Exodus crypto wallets targeted in malicious npm campaign · Published 14/04/2025 17:12 · Modified 14/04/2025 17:17
• Operation Phantom Circuit: North Korea's Global Data Exfiltration Campaign · Published 30/01/2025 16:13 · Modified 30/01/2025 16:33
• A new playground: Malicious campaigns proliferate from VSCode to npm · Published 19/12/2024 04:01 · Modified 19/12/2024 13:39
• Malicious PyPI crypto pay package aiocpa implants infostealer code · Published 29/11/2024 10:48 · Modified 29/11/2024 11:03
• Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview · Published 25/10/2024 13:53 · Modified 25/10/2024 15:52