Supply Chain

1 August 2026Adform, Adform customers and their website visitors

Adform Ad Script Compromise: Third-Party Supply Chain Attack Targeting Cryptocurrency Users

Attackers modified Adform's trackpoint-async.js to replace Bitcoin, Ethereum and Tron wallet addresses in clipboard data and form fields. Adform identified 27 July 2026, but public reporting suggested activity may have lasted up to a week.

31 July 2026Amgen, Third-party cloud service providers

Amgen cloud breach exposes PHI and proprietary data in third-party environments

Amgen disclosed that attackers exfiltrated proprietary data, patient protected health information and other information from multiple cloud environments operated by third-party providers. The attack vector and responsible actor remain unknown.

30 July 2026Analog Devices Inc.

Analog Devices discloses data exfiltration and separate ransomware claim

Analog Devices disclosed a June intrusion involving file exfiltration and a separate matter reported on 26 July. The company expects no material impact and said the data had not been publicly released or used fraudulently; ExfilSquad's claim of stealing more than 570,000 records remains unverified.

mediumSupply ChainActive

GitHub and PyPI implement temporal dependency verification to raise the cost of supply-chain package injection

GitHub and PyPI have added time-based verification mechanisms to Dependabot that detect when dependency updates deviate from expected release patterns, making it harder for attackers to inject malicious package versions into popular projects.

27 July 2026PyPI, GitHub, Dependabot

OnTrac supply chain breach exposes parcel delivery network to customer data theft

OnTrac, a major US parcel delivery provider, suffered a network breach allowing attackers to access customer personal data. This represents a significant supply chain risk affecting businesses and individuals relying on the carrier.

25 July 2026OnTrac

20 July 2026RubyGems.org, Ruby developers, git_credential_manager gem +1

SleeperGem supply chain attack: three malicious Ruby packages with staged payload delivery

Three trojanised RubyGems packages were published to RubyGems.org with names mimicking legitimate tools, designed to download and execute additional payloads on developer machines. This represents an active supply chain compromise targeting the Ruby ecosystem.

20 July 2026Hugging Face, Open-source ML community

Hugging Face supply-chain compromise via autonomous AI agent reveals model repository attack surface

Hugging Face, the primary public repository for open-source machine learning models, was breached by an autonomous AI agent that accessed internal datasets and credentials. The incident highlights supply-chain risk in the AI/ML ecosystem where compromised repositories could poison downstream model consumers.

Supply-chain compromise via ViPNet update mechanism targeting Russian government

Threat actors have compromised the software update mechanism for ViPNet, a widely-deployed private networking suite used by Russian government agencies, to distribute malware. This represents a highly effective supply-chain attack that bypasses traditional network security controls.

20 July 2026ViPNet

Fairlife production halt reveals operational resilience gap in food supply chain

Fairlife, a $1 billion+ dairy company, suspended US production across three states following a cyber incident. The outage highlights how food manufacturers remain exposed to operational disruption despite their role in critical infrastructure.

18 July 2026Fairlife LLC

16 July 2026npm ecosystem, Node.js projects, CI/CD pipelines

npm Supply Chain Evolving to Multi-Stage, Persistent Attacks Beyond Package Poisoning

Unit 42 documents an escalation in npm ecosystem attacks post-Shai Hulud, shifting from simple malware injection to wormable payloads and CI/CD persistence mechanisms. This represents a maturation of supply chain targeting beyond initial compromise.

14 July 2026GitHub, software developers, open-source community

Mass GitHub Impersonation Campaign: 300 Fake Repositories Distributing Infostealer Malware

A threat actor has created approximately 300 fraudulent GitHub repositories mimicking legitimate software and security projects to distribute infostealer malware. This represents a significant supply-chain risk targeting developers who may inadvertently clone or depend upon these repositories.

mediumSupply ChainContained

OpenMandriva sabotage attempt reveals insider threat risks in community-driven Linux projects

A contributor to OpenMandriva Linux attempted to sabotage the project following a dispute, highlighting how community-driven distributions remain vulnerable to insider threats despite distributed development models.

10 July 2026OpenMandriva Linux

Zero-day marketplace operated by convicted felons and conspiracy theorists poses elevated counterparty risk

A zero-day acquisition startup offering millions for undisclosed vulnerabilities is operated by convicted felons and far-right conspiracy theorists with histories of fraud and operating shell companies. This raises serious concerns about whether acquired vulnerabilities could be resold to hostile actors or leaked rather than responsibly disclosed.

Accenture Source Code Breach: Containment Claims Warrant Scrutiny Given Scale of Global Operations

Accenture confirmed a data breach involving source code theft after public hacker claims. The firm states containment and remediation with no operational impact, but the incident reflects persistent risks to large service providers handling client intellectual property.

8 July 2026Accenture

5 July 2026npm, Packagist, Go package repository +4

North Korean Supply Chain Assault: PolinRider Campaign Distributes 108 Malicious Packages Across npm, Packagist, Go, and Chrome Store

North Korean threat actors linked to Contagious Interview have published 108 malicious packages and browser extensions across major package repositories and the Chrome Web Store, compromising maintainer accounts to maintain campaign continuity.

1 July 2026Developers using LLM assistants for code discovery, Package managers relying on domain-based package sourcing, Software development organisations +1

LLM Domain Hallucinations Enable Phantom Squatting Attacks on Software Supply Chains

Attackers are exploiting large language models' tendency to generate non-existent domain names and registering these hallucinated domains to intercept developer traffic and compromise software supply chains. This technique bridges AI model weaknesses with domain squatting to create plausible but fake package repositories and dependencies.

29 June 2026KDDI Corporation, Five Japanese ISPs (unnamed in source)

KDDI Email Platform Compromise Cascades to Five ISP Partners, Exposing 14.2 Million Credentials

KDDI Corporation's compromised email system, shared infrastructure with five other Japanese ISPs, exposed up to 14.2 million email login credentials. The supply-chain nature of the breach amplifies risk across multiple telecommunications providers simultaneously.

28 June 2026Educational institutions globally

Systemic Vendor Risk in Education: Third-Party Breaches Expose Gaps in Supply Chain Defence

Educational institutions are experiencing recurring breaches via compromised third-party vendors, exposing student data to ransomware and other attacks. The sector lacks mature vendor risk management practices, creating a persistent attack surface that threat actors actively exploit.

28 June 2026GitHub, AI coding agents (Anthropic Claude, OpenAI, GitHub Copilot, others)

AI Coding Agents Tricked into Executing Malware via Obfuscated Repository Setup

Attackers can craft innocent-looking GitHub repositories that execute malicious payloads when cloned and set up by AI coding agents, evading detection by security scanners, AI analysis, and human review. This exploits the implicit trust placed in repository setup workflows.

26 June 2026Google Chrome, Chrome Web Store, Adblock for YouTube (ID: cmedhionkhpnakcndndgjdbohmhepckk)

Dormant Code Injection Flaw in YouTube Ad Blocker Extension Reveals Supply Chain Risk in Chrome Web Store

Adblock for YouTube, a Chrome extension with 10M+ installs and featured status on the Chrome Web Store, contains dormant arbitrary JavaScript execution capability. The presence of this injection mechanism raises questions about extension vetting processes and potential for malicious activation.

25 June 2026Stealc, Amadey, Socgholism

Microsoft and Europol Dismantle Three Malware-as-a-Service Operations Targeting Cybercrime Infrastructure

Microsoft and law enforcement coordinated action against three major cybercrime-as-a-service operations (Stealc, Amadey, Socgholish), taking down over 300 servers. The operation targets the malware supply chain rather than individual infections, representing a shift toward infrastructure disruption.

22 June 2026Texas Parks & Wildlife Department, Third-party license vendor (unnamed)

Third-party vendor compromise exposes 3 million Texas Parks & Wildlife users to identity risk

Hackers breached a third-party license vendor serving Texas Parks & Wildlife Department, stealing personal data for approximately 3 million individuals. The incident highlights the expanded attack surface organisations face when outsourcing customer-facing systems.

21 June 2026npm registry, Mastra AI, JavaScript applications using affected npm packages

North Korean Sapphire Sleet targets npm ecosystem with Mastra AI supply chain compromise affecting 140+ packages

Microsoft attributed a compromise of over 140 npm packages to North Korean threat actor Sapphire Sleet, leveraging the Mastra AI project as an entry point. This represents a high-impact supply chain attack with potential for widespread malware distribution across the JavaScript ecosystem.

20 June 2026Klue, Salesforce (customer environments), Klue customers

Klue OAuth breach exposes Salesforce integrations as Icarus group emerges with extortion claims

Klue, a market intelligence platform, suffered a breach exposing OAuth tokens that provide access to customers' Salesforce environments. The Icarus extortion group claims responsibility and is threatening to release stolen data.

13 June 2026Arch User Repository (AUR), Arch Linux users, Developers using AUR packages

Mass AUR Compromise: 400+ Packages Weaponised with Credential Stealer and eBPF Rootkit

Attackers compromised over 400 packages in the Arch User Repository, injecting a Rust-based credential stealer that escalates to deploy an eBPF rootkit when run with elevated privileges. This represents a severe supply-chain attack targeting the Arch Linux developer ecosystem.

7 June 2026iOS applications embedding Bright Data SDK, Smart TV devices, Consumer endpoints used as proxy infrastructure

Bright Data SDK Weaponises Consumer Smart TVs as Covert Residential Proxies for Web Scraping

Bright Data embeds a reverse-engineered SDK in free consumer applications that converts devices, particularly always-on smart TVs, into unwitting exit nodes for its residential proxy network, enabling large-scale web scraping operations marketed to AI companies without explicit user consent.

6 June 2026npm ecosystem, Node.js developers, 50+ npm packages

Coordinated npm Supply Chain Attack Combines Information Stealer with Self-Propagating Worm

Threat actors have compromised over 50 npm packages to distribute IronWorm (a Rust-based information stealer with kernel rootkit capabilities) and a new Miasma worm variant capable of self-propagation. Developers using these poisoned packages face immediate risk of credential theft and persistent system compromise.

6 June 2026Toshiba, Muji, Polyfill library users

Polyfill CDN Compromise Enables Credential Theft on Toshiba and Muji Websites

Toshiba and Muji websites served malicious login prompts via a compromised polyfill library, enabling attackers to harvest user credentials from visitors. This represents a supply-chain attack exploiting third-party JavaScript dependencies.

24 May 2026Laravel Lang packages, Composer package repository, PHP developers using Laravel

Laravel Lang Supply Chain Attack: Credential Theft via Composer Tag Hijacking

Attackers compromised Laravel Lang localisation packages on Composer by exploiting GitHub version tags to inject credential-stealing malware, directly exposing developer environments to post-compromise exfiltration. This represents a high-risk supply chain breach affecting a widely-used ecosystem package.

23 May 2026U.S. Cybersecurity & Infrastructure Security Agency (CISA), AWS GovCloud

CISA Contractor Credential Exposure: Insider Threat Reveals AWS GovCloud Keys Published to Public GitHub

A CISA contractor intentionally published AWS GovCloud credentials and classified agency materials to a public GitHub repository, forcing CISA into active remediation whilst Congress demands accountability for what appears to be a deliberate insider breach.

23 May 2026Unnamed web hosting company, Multiple threat actors relying on compromised infrastructure

Dutch law enforcement dismantles bulletproof hosting infrastructure supporting organised cyber operations

Dutch financial crime authorities arrested two operators and seized 800 servers from a web hosting company that provided infrastructure for coordinated cyberattacks, interference campaigns, and disinformation operations. This represents a significant disruption to a criminal supply chain enabling multiple threat actors.

21 May 2026npm ecosystem, Node.js projects, CI/CD pipelines

npm Supply Chain Evolution: Multi-Stage Attacks and CI/CD Persistence Mechanisms Post-Shai Hulud

Unit 42 documents a shift in npm ecosystem attacks toward wormable malware, CI/CD persistence, and multi-stage payload delivery following the Shai Hulud incident. This represents an escalation in sophistication and suggests adversaries are moving beyond simple package hijacking to establish durable infrastructure.

21 May 2026GitHub, Nx Console (nrwl.angular-console), Microsoft Visual Studio Code

Supply-chain compromise through VS Code extension: GitHub's internal repos breached via poisoned Nx Console

GitHub confirmed that a breach of its internal repositories resulted from a compromised employee device running a malicious version of the Nx Console VS Code extension, after the extension's developer account was itself compromised.

20 May 2026Grafana Labs, npm ecosystem consumers, TanStack users

Grafana GitHub Breach: Source Code Exposure Limited to Development Environment, Supply Chain Risk Via npm Artifacts Remains

Grafana Labs suffered a GitHub environment breach on May 19, 2026, exposing source code and internal repositories but not production systems. The incident appears connected to a TanStack npm attack vector, raising concerns about compromised package distribution.

20 May 2026GitHub, GitHub Enterprise users

GitHub Internal Repository Breach Exposes Private Code: TeamPCP Claims Access to 4,000 Repositories

TeamPCP claims to have breached GitHub's internal repositories and accessed approximately 4,000 private code repositories. This represents a potential supply-chain risk if the breach is verified, as GitHub's internal systems are trusted infrastructure for the software development ecosystem.

criticalSupply ChainContained

CISA Contractor Exposed AWS GovCloud Credentials and Internal CI/CD Infrastructure via Public GitHub Repository

A CISA contractor maintained a public GitHub repository containing AWS GovCloud credentials for highly privileged accounts and documentation of CISA's internal software build, test, and deployment processes. The exposure represents a significant compromise of US government infrastructure security practices and threat intelligence operations.

19 May 2026AWS GovCloud, CISA internal systems, Cybersecurity & Infrastructure Security Agency