{ "site": "https://pwn.watch", "generatedAt": "2026-10-23T03:01:01.167Z", "tag": { "id": "supply-chain", "label": "Supply chain", "isStack": false, "url": "https://pwn.watch/t/supply-chain", "feed": "https://pwn.watch/t/supply-chain/feed.xml" }, "counts": { "incidents": 32, "live": 2, "notFullyPatched": 1, "patched": 28 }, "incidents": [ { "slug": "litellm-1-107-0-pypi-compromise", "title": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise", "json": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise.json", "status": "live", "severity": "critical", "patchStatus": "patched", "product": "LiteLLM (PyPI + official Docker/GHCR images)", "tags": [ "python", "pypi", "docker", "ai", "litellm", "supply-chain" ], "cveIds": [ "MAL-2026-2144" ], "affectedVersions": [ "litellm==1.107.0; Docker/GHCR tags v1.107.0, latest, main-latest, main-stable during the Oct 21 window" ], "fixedVersions": [ "1.106.2 (pin; last known safe). Malicious 1.107.0 removed from PyPI, Docker Hub and GHCR" ], "startedAt": "2026-10-21", "closedAt": null, "updatedAt": "2026-10-23T03:00:20Z", "summary": "On Oct 21 2026 attackers compromised LiteLLM’s release pipeline and published malicious litellm==1.107.0 to PyPI (live ~2 hours) plus compromised Docker Hub/GHCR tags (v1.107.0, latest, main-latest, main-stable). The wheels install cook.pth / cook.py / sitecustomize.py that steal cloud, developer and AI-tool credentials at every Python startup and open a remote-code loader. Second LiteLLM compromise of 2026.", "xPost": null }, { "slug": "ovhcloud-cli-github-infostealer", "title": "OVHcloud CLI releases backdoored on GitHub", "url": "https://pwn.watch/i/ovhcloud-cli-github-infostealer", "json": "https://pwn.watch/i/ovhcloud-cli-github-infostealer.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "OVHcloud CLI (GitHub releases)", "tags": [ "hosting", "github", "ovhcloud", "supply-chain" ], "cveIds": [], "affectedVersions": [ "Five backdoored releases during the Oct 2026 window (see OVHcloud advisory)" ], "fixedVersions": [ "Clean releases after incident; reinstall from verified source" ], "startedAt": "2026-10-19", "closedAt": "2026-10-20", "updatedAt": "2026-10-20", "summary": "In mid-October 2026 OVHcloud said attackers hijacked a developer GitHub account and planted an information stealer in five releases of its open-source CLI. Users who installed those releases should treat workstations as compromised and rotate credentials.", "xPost": null }, { "slug": "updraftcentral-keys-wordpress-backdoor", "title": "TeamUpdraft / UpdraftCentral keys stolen; WordPress sites backdoored", "url": "https://pwn.watch/i/updraftcentral-keys-wordpress-backdoor", "json": "https://pwn.watch/i/updraftcentral-keys-wordpress-backdoor.json", "status": "closed", "severity": "high", "patchStatus": "partial", "product": "UpdraftPlus / UpdraftCentral (WordPress)", "tags": [ "php", "wordpress", "updraftplus", "supply-chain", "data-breach" ], "cveIds": [], "affectedVersions": [ "Sites with stolen UpdraftCentral connection keys" ], "fixedVersions": [], "startedAt": "2026-10-18", "closedAt": "2026-10-20", "updatedAt": "2026-10-20", "summary": "UK plugin maker TeamUpdraft said attackers breached its website, stole UpdraftCentral connection keys, and used them to backdoor WordPress sites running UpdraftPlus/UpdraftCentral.", "xPost": null }, { "slug": "rank-math-pro-wordpress-backdoor", "title": "Rank Math PRO WordPress plugin download backdoored", "url": "https://pwn.watch/i/rank-math-pro-wordpress-backdoor", "json": "https://pwn.watch/i/rank-math-pro-wordpress-backdoor.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "Rank Math PRO (WordPress)", "tags": [ "php", "wordpress", "rank-math", "supply-chain" ], "cveIds": [], "affectedVersions": [ "3.0.123 (compromised download window)" ], "fixedVersions": [ "Clean PRO builds after incident" ], "startedAt": "2026-10-15", "closedAt": "2026-10-16", "updatedAt": "2026-10-16", "summary": "SEO plugin vendor Rank Math confirmed attackers tampered with PRO version 3.0.123 on the official download site, planting hidden backdoors during an ~11-hour window. Sites that installed that build should audit and rebuild.", "xPost": null }, { "slug": "tensorlake-npm-shai-hulud-worm", "title": "tensorlake@0.5.144 npm Shai-Hulud worm with hostage GitHub token", "url": "https://pwn.watch/i/tensorlake-npm-shai-hulud-worm", "json": "https://pwn.watch/i/tensorlake-npm-shai-hulud-worm.json", "status": "live", "severity": "critical", "patchStatus": "partial", "product": "tensorlake (npm)", "tags": [ "node", "npm", "github", "shai-hulud", "supply-chain" ], "cveIds": [ "GHSA-8g63-53c9-65j2" ], "affectedVersions": [ "0.5.144" ], "fixedVersions": [ "0.5.143 (safe pin); remove 0.5.144" ], "startedAt": "2026-10-07", "closedAt": null, "updatedAt": "2026-10-23T03:00:20Z", "summary": "On Oct 8 2026, tensorlake@0.5.144 was published from the real GitHub repo (with npm provenance) carrying a preinstall hook that installs a Shai-Hulud-style credential-stealing worm. It harvests npm/GitHub/cloud/SSH/AI-tool secrets, spreads to other packages, and installs a “gh-token-monitor” that wipes the home directory if the stolen GitHub token is revoked. Pin 0.5.143; remove the monitor before rotating tokens.", "xPost": null }, { "slug": "subql-common-npm-backdoor", "title": "SubQuery @subql/common 5.8.3 published with credential stealer + backdoor", "url": "https://pwn.watch/i/subql-common-npm-backdoor", "json": "https://pwn.watch/i/subql-common-npm-backdoor.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "@subql/common (npm) and downstream @subql/* packages", "tags": [ "node", "npm", "github", "supply-chain", "infostealer" ], "cveIds": [ "GHSA-9333-3c4x-x3h5", "MAL-2026-17571" ], "affectedVersions": [ "@subql/common 5.8.3", "@subql/common 5.8.3-onf-rt1 (attacker canary, no payload found; 'redteam' dist-tag still points to it)", "Downstream ranges that resolve to 5.8.3, e.g. @subql/cli 6.6.3, @subql/node-core 19.3.1, @subql/query 2.25.0, @subql/node-ethereum 6.5.0" ], "fixedVersions": [ "@subql/common 5.8.2 (npm 'latest')" ], "startedAt": "2026-10-05T11:56:29Z", "closedAt": "2026-10-10", "updatedAt": "2026-10-22T12:04:00+02:00", "summary": "On Oct 5 2026 @subql/common 5.8.3 was published to npm through SubQuery's own GitHub Actions trusted publisher, after a short-lived branch changed the release step to swap the built package for a tarball downloaded from ci-artifacts.dev. The payload ran on install (postinstall) and on import, stole CI/cloud/GitHub/npm/Kubernetes/Vault/SSH and AI-tool credentials, offered a reverse shell, and with a workflow-scoped token tried to push a secret-dumping workflow. It was live about 50 minutes; 5.8.2 is the safe version. Many @subql packages accept 5.8.3 through their version ranges.", "xPost": null }, { "slug": "shai-hulud-chaindrop-npm-keyv-august", "title": "CHAINDROP / Mini Shai-Hulud npm worm (keyv + 400+ packages)", "url": "https://pwn.watch/i/shai-hulud-chaindrop-npm-keyv-august", "json": "https://pwn.watch/i/shai-hulud-chaindrop-npm-keyv-august.json", "status": "closed", "severity": "critical", "patchStatus": "partial", "product": "npm ecosystem (keyv, cacheable, flat-cache, cache-manager, and 400+ packages)", "tags": [ "node", "npm", "github", "shai-hulud", "supply-chain" ], "cveIds": [], "affectedVersions": [ "Compromised patch versions published ~Aug 4 2026 (see Wiz/JFrog package lists)" ], "fixedVersions": [ "Pin known-good versions; purge caches; npm CLI 12+ disables preinstall by default" ], "startedAt": "2026-08-04", "closedAt": "2026-08-15", "updatedAt": "2026-08-15", "summary": "In early August 2026 a Mini Shai-Hulud / CHAINDROP worm compromised keyv and related cache packages, then self-propagated via stolen npm tokens to 400+ packages (1B+ monthly downloads across the graph). Payload runs via preinstall (disabled by default on npm 12+), steals npm/GitHub/cloud/CI secrets, and republishes backdoored versions. Microsoft, Elastic, JFrog and Wiz published analyses.", "xPost": null }, { "slug": "aomei-backupper-update-supply-chain", "title": "AOMEI Backupper update servers backdoored (Mandiant)", "url": "https://pwn.watch/i/aomei-backupper-update-supply-chain", "json": "https://pwn.watch/i/aomei-backupper-update-supply-chain.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "AOMEI Backupper", "tags": [ "aomei", "supply-chain" ], "cveIds": [], "affectedVersions": [ "Clients that pulled updates during the compromise window" ], "fixedVersions": [ "Vendor-clean updates after remediation" ], "startedAt": "2026-06-01", "closedAt": "2026-10-16", "updatedAt": "2026-10-16", "summary": "Google Mandiant and ManageEngine reported that a threat actor tampered with AOMEI Backupper update servers mid-2026, pushing a backdoor to users across multiple countries. Disclosure clustered around Oct 16 2026.", "xPost": null }, { "slug": "nx-nx-console-cve-2026-48027", "title": "Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability", "url": "https://pwn.watch/i/nx-nx-console-cve-2026-48027", "json": "https://pwn.watch/i/nx-nx-console-cve-2026-48027.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "Nx Nx Console", "tags": [ "node", "devtools", "nx", "supply-chain", "ransomware", "cisa-kev" ], "cveIds": [ "CVE-2026-48027" ], "affectedVersions": [ "See vendor advisory / CISA notes (versions not always listed in KEV feed)" ], "fixedVersions": [ "See vendor advisory linked in sources" ], "startedAt": "2026-05-27", "closedAt": "2026-05-27", "updatedAt": "2026-05-27", "summary": "Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory. Added to CISA KEV on 2026-05-27.", "xPost": null }, { "slug": "shai-hulud-antv-npm-may", "title": "Mini Shai-Hulud hits AntV / timeago.js npm ecosystem", "url": "https://pwn.watch/i/shai-hulud-antv-npm-may", "json": "https://pwn.watch/i/shai-hulud-antv-npm-may.json", "status": "closed", "severity": "critical", "patchStatus": "partial", "product": "npm @antv/*, timeago.js, related packages under atool", "tags": [ "node", "npm", "github", "shai-hulud", "supply-chain" ], "cveIds": [], "affectedVersions": [ "Malicious versions published during May 2026 campaign window" ], "fixedVersions": [ "Remove malicious versions; rotate CI/cloud secrets; pin clean releases" ], "startedAt": "2026-05-19", "closedAt": "2026-06-01", "updatedAt": "2026-06-01", "summary": "May 2026 wave of Mini Shai-Hulud compromised packages across Alibaba’s AntV visualization ecosystem and timeago.js (via npm account atool). Payload harvested CI secrets from GitHub Actions runner memory and dumped credentials to public GitHub repos. StepSecurity documented the ongoing spread.", "xPost": null }, { "slug": "openai-employee-devices-tanstack-shai-hulud", "title": "OpenAI employee devices hit via TanStack Mini Shai-Hulud wave", "url": "https://pwn.watch/i/openai-employee-devices-tanstack-shai-hulud", "json": "https://pwn.watch/i/openai-employee-devices-tanstack-shai-hulud.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "TanStack-related npm packages / OpenAI employee endpoints", "tags": [ "node", "npm", "openai", "tanstack", "shai-hulud", "supply-chain", "data-breach" ], "cveIds": [], "affectedVersions": [ "Compromised TanStack package versions in the May wave" ], "fixedVersions": [], "startedAt": "2026-05-01", "closedAt": "2026-05-31", "updatedAt": "2026-05-31", "summary": "In May 2026 OpenAI confirmed two employee devices were breached as part of the broader TanStack Mini Shai-Hulud npm supply-chain campaign. OpenAI said customer data, production systems, IP and deployed software were not impacted.", "xPost": null }, { "slug": "teampcp-trivy-checkmarx-supply-chain", "title": "TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions", "url": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain", "json": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "Aqua Trivy, trivy-action, setup-trivy, Checkmarx AST/KICS GitHub Actions, related Docker/VS Code artifacts", "tags": [ "github-actions", "docker", "devtools", "github", "trivy", "checkmarx", "vscode", "supply-chain" ], "cveIds": [], "affectedVersions": [ "Trivy v0.69.4; trivy-action before v0.35.0; setup-trivy before v0.2.6; Checkmarx AST v2.3.28; KICS before v2.1.20 (per vendor/CSA guidance)" ], "fixedVersions": [ "trivy-action >= v0.35.0", "setup-trivy >= v0.2.6", "Checkmarx AST/KICS patched releases per Checkmarx updates" ], "startedAt": "2026-03-01", "closedAt": "2026-03-31", "updatedAt": "2026-03-31", "summary": "Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.", "xPost": null }, { "slug": "asus-live-update-cve-2025-59374", "title": "ASUS Live Update: Live Update Embedded Malicious Code Vulnerability", "url": "https://pwn.watch/i/asus-live-update-cve-2025-59374", "json": "https://pwn.watch/i/asus-live-update-cve-2025-59374.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "ASUS Live Update", "tags": [ "asus", "supply-chain", "cisa-kev" ], "cveIds": [ "CVE-2025-59374" ], "affectedVersions": [ "See vendor advisory / CISA notes (versions not always listed in KEV feed)" ], "fixedVersions": [ "See vendor advisory linked in sources" ], "startedAt": "2025-12-17", "closedAt": "2025-12-17", "updatedAt": "2025-12-17", "summary": "ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-12-17.", "xPost": null }, { "slug": "shai-hulud-2-npm-worm-november-2025", "title": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025", "json": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "npm packages (posthog-js, posthog-node, @postman/*, Zapier, ENS Domains, AsyncAPI and others)", "tags": [ "npm", "node", "shai-hulud", "posthog", "postman", "zapier", "github", "supply-chain", "infostealer", "worm" ], "cveIds": [], "affectedVersions": [ "e.g. posthog-node 4.18.1, 5.13.3, 5.11.3; posthog-js 1.297.3; posthog-react-native 4.11.1; @postman/tunnel-agent 0.6.5-0.6.7 (full lists in sources)" ], "fixedVersions": [ "Malicious versions unpublished; use versions published after 2025-11-24 per each vendor" ], "startedAt": "2025-11-24", "closedAt": "2025-11-26", "updatedAt": "2025-11-26", "summary": "A second wave of the Shai-Hulud worm ran in npm preinstall scripts (setup_bun.js), stole credentials with TruffleHog and pushed them to public GitHub repos, then republished packages with any npm tokens it found. Datadog counted 796 backdoored packages with 20M+ weekly downloads; Wiz saw 25,000+ attacker repos.", "xPost": null }, { "slug": "glassworm-vscode-openvsx-worm-october-2025", "title": "GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode", "url": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025", "json": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "VS Code extensions on OpenVSX and the VS Code Marketplace", "tags": [ "devtools", "glassworm", "vscode", "openvsx", "supply-chain", "worm", "crypto" ], "cveIds": [], "affectedVersions": [ "e.g. CodeJoy 1.8.3/1.8.4, cline-ai-agent 3.1.3 (Microsoft marketplace) and several OpenVSX extensions (see Koi list)" ], "fixedVersions": [ "Malicious releases removed from the marketplaces" ], "startedAt": "2025-10-17", "closedAt": "2025-10-31", "updatedAt": "2025-10-31", "summary": "Koi Security found extensions on OpenVSX (and one on Microsoft's marketplace) carrying JavaScript hidden in invisible Unicode variation selectors. The malware stole npm, GitHub, Git and OpenVSX credentials to infect more extensions, went after crypto wallets, and set up SOCKS proxies and hidden VNC.", "xPost": null }, { "slug": "shai-hulud-npm-worm-september-2025", "title": "Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike", "url": "https://pwn.watch/i/shai-hulud-npm-worm-september-2025", "json": "https://pwn.watch/i/shai-hulud-npm-worm-september-2025.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "npm packages (@ctrl/tinycolor, @crowdstrike/*, 500+ others)", "tags": [ "npm", "node", "github-actions", "shai-hulud", "crowdstrike", "github", "supply-chain", "infostealer", "worm" ], "cveIds": [], "affectedVersions": [ "Specific malicious versions of 500+ npm packages (see Socket / CISA lists)" ], "fixedVersions": [ "Malicious versions removed from npm; upgrade to versions published after the incident" ], "startedAt": "2025-09-14", "closedAt": "2025-09-23", "updatedAt": "2025-09-23", "summary": "A worm spread through npm by stealing maintainers' npm and GitHub tokens with TruffleHog, then republishing their packages with a malicious bundle.js postinstall. It created shai-hulud GitHub workflows to exfiltrate secrets and made private repos public. CISA counted more than 500 affected packages, including @ctrl/tinycolor and several @crowdstrike packages.", "xPost": null }, { "slug": "chalk-debug-npm-hijack-september-2025", "title": "chalk, debug and 16 other npm packages (2B+ weekly downloads) hijacked via fake 2FA email", "url": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025", "json": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "npm: chalk, debug, ansi-styles, strip-ansi, supports-color and 13 more", "tags": [ "npm", "node", "chalk", "phishing", "supply-chain", "crypto" ], "cveIds": [], "affectedVersions": [ "chalk 5.6.1", "debug 4.4.2", "ansi-styles 6.2.2", "strip-ansi 7.1.1", "supports-color 10.2.1", "ansi-regex 6.2.1", "wrap-ansi 9.0.1", "slice-ansi 7.1.1", "has-ansi 6.0.1", "chalk-template 1.1.1", "supports-hyperlinks 4.1.1", "others: see debug-js/debug#1005" ], "fixedVersions": [ "chalk 5.6.2", "ansi-styles 6.2.3", "strip-ansi 7.1.2", "supports-color 10.2.2", "ansi-regex 6.2.2", "wrap-ansi 9.0.2", "slice-ansi 7.1.2", "has-ansi 6.0.2", "chalk-template 1.1.2", "supports-hyperlinks 4.1.2", "debug and others: republished by the maintainer on 2025-09-13" ], "startedAt": "2025-09-08", "closedAt": "2025-09-13", "updatedAt": "2025-09-15", "summary": "Maintainer Josh Junon (qix) was phished by a fake npm 2FA-reset email from npmjs.help. The attacker published malicious versions of 18 packages, including chalk, debug, ansi-styles and strip-ansi, with code that hijacked crypto wallet transactions in browsers. They were live for about two hours.", "xPost": null }, { "slug": "nx-s1ngularity-npm-supply-chain-august-2025", "title": "s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed", "url": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025", "json": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "nx and @nx/* npm packages", "tags": [ "npm", "node", "github-actions", "ai", "nx", "s1ngularity", "github", "supply-chain", "infostealer" ], "cveIds": [], "affectedVersions": [ "nx 20.9.0-20.12.0, 21.5.0-21.8.0", "@nx/devkit, @nx/js, @nx/workspace, @nx/node 20.9.0 / 21.5.0", "@nx/eslint 21.5.0", "@nx/key, @nx/enterprise-cloud 3.2.0" ], "fixedVersions": [ "Malicious versions removed from npm (see GHSA-cxm3-wv7p-598c)" ], "startedAt": "2025-08-26", "closedAt": "2025-08-29", "updatedAt": "2025-08-29", "summary": "Attackers abused a GitHub Actions injection bug in nrwl/nx to steal its npm token and published malicious nx and @nx/* versions for about four hours. The postinstall script used local AI CLIs (Claude, Gemini, Q) to find secrets and pushed them to public s1ngularity-repository repos. A second phase used stolen GitHub tokens to make 5,500+ private repos public.", "xPost": null }, { "slug": "salesloft-drift-oauth-salesforce-data-theft-2025", "title": "Salesloft Drift OAuth tokens used to raid 700+ companies' Salesforce data (UNC6395)", "url": "https://pwn.watch/i/salesloft-drift-oauth-salesforce-data-theft-2025", "json": "https://pwn.watch/i/salesloft-drift-oauth-salesforce-data-theft-2025.json", "status": "closed", "severity": "high", "patchStatus": "no-fix-needed", "product": "Salesloft Drift integration (Salesforce, Google Workspace)", "tags": [ "salesloft", "drift", "salesforce", "oauth", "cloudflare", "data-breach", "supply-chain" ], "cveIds": [], "affectedVersions": [ "Organizations with Drift connected to Salesforce or other apps" ], "fixedVersions": [ "Drift tokens revoked; rotate any secrets stored in Salesforce" ], "startedAt": "2025-08-08", "closedAt": "2025-09-07", "updatedAt": "2025-09-07", "summary": "Between August 8 and 18, 2025, UNC6395 used stolen OAuth tokens for the Salesloft Drift chatbot integration to bulk-export data from customers' Salesforce instances, hunting for AWS keys, Snowflake tokens, passwords and VPN credentials. Cloudflare, Palo Alto Networks, Zscaler and many others disclosed exposure. Salesforce pulled Drift from AppExchange.", "xPost": null }, { "slug": "eslint-config-prettier-npm-phishing-cve-2025-54313", "title": "eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313)", "url": "https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313", "json": "https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "npm: eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall, is", "tags": [ "npm", "node", "eslint", "phishing", "windows", "supply-chain", "infostealer" ], "cveIds": [ "CVE-2025-54313" ], "affectedVersions": [ "eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, 10.1.7", "is 3.3.1, 5.0.0" ], "fixedVersions": [ "Malicious versions removed; use other eslint-config-prettier versions (see CVE record)" ], "startedAt": "2025-07-18", "closedAt": "2025-07-22", "updatedAt": "2025-07-22", "summary": "A maintainer was phished through the typosquat domain npnjs.com. The attacker published malicious eslint-config-prettier versions whose install script ran node-gyp.dll on Windows, dropping the Scavenger infostealer. eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall and later the 'is' package were also hit.", "xPost": null }, { "slug": "reviewdog-action-setup-github-action-cve-2025-30154", "title": "reviewdog action-setup GitHub Action: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability", "url": "https://pwn.watch/i/reviewdog-action-setup-github-action-cve-2025-30154", "json": "https://pwn.watch/i/reviewdog-action-setup-github-action-cve-2025-30154.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "reviewdog action-setup GitHub Action", "tags": [ "github-actions", "devtools", "reviewdog", "github", "supply-chain", "cisa-kev" ], "cveIds": [ "CVE-2025-30154" ], "affectedVersions": [ "See vendor advisory / CISA notes (versions not always listed in KEV feed)" ], "fixedVersions": [ "See vendor advisory linked in sources" ], "startedAt": "2025-03-24", "closedAt": "2025-03-24", "updatedAt": "2025-03-24", "summary": "reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Github Actions Workflow Logs. Added to CISA KEV on 2025-03-24.", "xPost": null }, { "slug": "tj-actions-changed-files-supply-chain-cve-2025-30066", "title": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066", "json": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "tj-actions/changed-files GitHub Action", "tags": [ "github-actions", "devtools", "tj-actions", "reviewdog", "github", "coinbase", "supply-chain", "cisa-kev" ], "cveIds": [ "CVE-2025-30066" ], "affectedVersions": [ "tj-actions/changed-files through 45.0.7 (tags repointed March 14-15, 2025)" ], "fixedVersions": [ "46.0.1 (see GitHub advisory GHSA-mw4p-6x4p-x5m5)" ], "startedAt": "2025-03-14", "closedAt": "2025-03-20", "updatedAt": "2025-03-20", "summary": "Attackers repointed the version tags of the popular tj-actions/changed-files GitHub Action to a commit that dumped runner memory, printing CI/CD secrets into workflow logs. It started with the compromise of reviewdog/action-setup and was aimed at Coinbase's agentkit repo first. Over 23,000 repositories used the action.", "xPost": null }, { "slug": "bybit-1-5b-hack-safe-wallet-february-2025", "title": "Bybit loses ~$1.5B in ETH after Safe{Wallet} frontend is trojanized (North Korea)", "url": "https://pwn.watch/i/bybit-1-5b-hack-safe-wallet-february-2025", "json": "https://pwn.watch/i/bybit-1-5b-hack-safe-wallet-february-2025.json", "status": "closed", "severity": "critical", "patchStatus": "no-fix-needed", "product": "Bybit cold wallet / Safe{Wallet} web UI", "tags": [ "bybit", "safe-wallet", "crypto", "north-korea", "lazarus", "aws", "supply-chain" ], "cveIds": [], "affectedVersions": [ "n/a" ], "fixedVersions": [], "startedAt": "2025-02-21", "closedAt": "2025-03-06", "updatedAt": "2025-03-06", "summary": "North Korean TraderTraitor/Lazarus hackers compromised a Safe{Wallet} developer's Mac, took over AWS session tokens and injected JavaScript into Safe's S3-hosted frontend. Bybit's signers approved what looked like a routine transfer but was a malicious transaction. It is the largest crypto theft on record; the FBI attributed it to North Korea.", "xPost": null }, { "slug": "ultralytics-pypi-supply-chain-attack", "title": "Ultralytics PyPI releases backdoored with a crypto miner", "url": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack", "json": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "ultralytics (PyPI)", "tags": [ "python", "pypi", "github-actions", "ai", "ultralytics", "supply-chain", "cryptominer", "github" ], "cveIds": [], "affectedVersions": [ "8.3.41", "8.3.42", "8.3.45", "8.3.46" ], "fixedVersions": [ "Malicious versions removed from PyPI; see vendor advisory for the clean release" ], "startedAt": "2024-12-04", "closedAt": "2024-12-11", "updatedAt": "2024-12-11", "summary": "Attackers compromised the Ultralytics YOLO project's GitHub Actions workflows (by poisoning the Actions cache) and published ultralytics 8.3.41 and 8.3.42 to PyPI with an XMRig cryptominer. They later pushed 8.3.45 and 8.3.46 using a leftover PyPI API token. All four versions were removed. PyPI's analysis credits Trusted Publishing attestations with making the attack auditable.", "xPost": null }, { "slug": "solana-web3-js-npm-compromise-cve-2024-54134", "title": "@solana/web3.js npm package backdoored to steal private keys", "url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134", "json": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "@solana/web3.js (npm)", "tags": [ "node", "npm", "solana", "crypto", "supply-chain" ], "cveIds": [ "CVE-2024-54134" ], "affectedVersions": [ "1.95.6", "1.95.7" ], "fixedVersions": [ "1.95.8" ], "startedAt": "2024-12-03", "closedAt": "2024-12-04", "updatedAt": "2024-12-04", "summary": "A publish-access account for @solana/web3.js was compromised. Malicious versions 1.95.6 and 1.95.7, live on npm from 15:20 to 20:25 UTC on 2024-12-03, exfiltrated private key material from apps and bots that handle keys directly. Non-custodial wallets were generally not affected. Fixed in 1.95.8.", "xPost": null }, { "slug": "lottiefiles-lottie-player-npm-compromise", "title": "@lottiefiles/lottie-player npm package hijacked with a crypto wallet drainer", "url": "https://pwn.watch/i/lottiefiles-lottie-player-npm-compromise", "json": "https://pwn.watch/i/lottiefiles-lottie-player-npm-compromise.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "@lottiefiles/lottie-player (npm)", "tags": [ "node", "npm", "lottiefiles", "crypto", "supply-chain" ], "cveIds": [], "affectedVersions": [ "2.0.5", "2.0.6", "2.0.7" ], "fixedVersions": [ "2.0.8" ], "startedAt": "2024-10-30", "closedAt": "2024-10-31", "updatedAt": "2024-10-31", "summary": "A LottieFiles developer's npm access was abused to publish @lottiefiles/lottie-player 2.0.5, 2.0.6 and 2.0.7 on 2024-10-30. Sites loading the 'latest' build from CDNs like unpkg and jsDelivr showed a wallet-connect popup that tried to drain visitors' crypto wallets. LottieFiles unpublished the versions and released 2.0.8, a copy of 2.0.4.", "xPost": null }, { "slug": "polyfill-io-supply-chain-attack", "title": "polyfill.io CDN turned malicious on 100k+ sites", "url": "https://pwn.watch/i/polyfill-io-supply-chain-attack", "json": "https://pwn.watch/i/polyfill-io-supply-chain-attack.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "polyfill.io CDN", "tags": [ "polyfill", "javascript", "cdn", "supply-chain", "cloudflare" ], "cveIds": [], "affectedVersions": [ "Any site loading scripts from cdn.polyfill.io" ], "fixedVersions": [ "Remove polyfill.io references or switch to the Cloudflare/Fastly mirrors" ], "startedAt": "2024-06-25", "closedAt": "2024-06-27", "updatedAt": "2024-06-27", "summary": "The polyfill.io domain and GitHub account were bought in February 2024 by a Chinese company. The CDN, embedded via cdn.polyfill.io on more than 100,000 sites, then served malicious JavaScript that redirected some mobile visitors to a sports betting site. Sansec exposed it on 2024-06-25. Cloudflare began rewriting polyfill.io links to its own mirror, and Namecheap put the domain on hold.", "xPost": null }, { "slug": "justice-av-solutions-viewer-cve-2024-4978", "title": "Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code", "url": "https://pwn.watch/i/justice-av-solutions-viewer-cve-2024-4978", "json": "https://pwn.watch/i/justice-av-solutions-viewer-cve-2024-4978.json", "status": "closed", "severity": "high", "patchStatus": "patched", "product": "Justice AV Solutions Viewer", "tags": [ "justice-av-solutions", "cisa-kev", "supply-chain" ], "cveIds": [ "CVE-2024-4978" ], "affectedVersions": [ "See vendor advisory (versions are not listed in the KEV record)" ], "fixedVersions": [ "See vendor advisory linked in sources" ], "startedAt": "2024-05-23", "closedAt": "2024-05-29", "updatedAt": "2024-05-29", "summary": "Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server. Added to the CISA KEV catalog on 2024-05-29.", "xPost": null }, { "slug": "xz-utils-backdoor-cve-2024-3094", "title": "xz-utils backdoor (CVE-2024-3094)", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094", "json": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "XZ Utils (liblzma)", "tags": [ "linux", "xz-utils", "openssh", "supply-chain", "backdoor", "rce" ], "cveIds": [ "CVE-2024-3094" ], "affectedVersions": [ "5.6.0", "5.6.1" ], "fixedVersions": [ "Downgrade to an uncompromised version such as 5.4.6 Stable (CISA)", "5.6.2 clean release (2024-05-29, tukaani.org)" ], "startedAt": "2024-03-29", "closedAt": "2024-05-29", "updatedAt": "2024-05-29", "summary": "A maintainer persona, 'Jia Tan', slipped a backdoor into the release tarballs of XZ Utils 5.6.0 and 5.6.1. Through liblzma it targeted OpenSSH's sshd on distributions that link sshd against libsystemd, so a key holder could get unauthenticated remote code execution. Andres Freund spotted it after noticing SSH logins using a lot of CPU on Debian sid. It reached only bleeding-edge distributions such as Fedora 41/Rawhide and Debian unstable before it was caught.", "xPost": null }, { "slug": "ledger-connect-kit-npm-supply-chain-2023", "title": "Ledger Connect Kit npm package hijacked to drain crypto wallets", "url": "https://pwn.watch/i/ledger-connect-kit-npm-supply-chain-2023", "json": "https://pwn.watch/i/ledger-connect-kit-npm-supply-chain-2023.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "@ledgerhq/connect-kit (npm)", "tags": [ "npm", "node", "ledger", "supply-chain", "crypto", "wallet-drainer", "phishing" ], "cveIds": [], "affectedVersions": [ "@ledgerhq/connect-kit 1.1.5, 1.1.6, 1.1.7" ], "fixedVersions": [ "1.1.8" ], "startedAt": "2023-12-14", "closedAt": "2023-12-14", "updatedAt": "2023-12-14", "summary": "Attackers phished a former Ledger employee's npm account and published malicious @ledgerhq/connect-kit versions 1.1.5 to 1.1.7. Because many dApps load it from a CDN without pinning a version, their users were shown wallet-drainer prompts. Ledger shipped a clean 1.1.8 within about 40 minutes of finding out.", "xPost": null }, { "slug": "jumpcloud-nation-state-breach-2023", "title": "JumpCloud breached by North Korean hackers to reach crypto customers", "url": "https://pwn.watch/i/jumpcloud-nation-state-breach-2023", "json": "https://pwn.watch/i/jumpcloud-nation-state-breach-2023.json", "status": "closed", "severity": "high", "patchStatus": "no-fix-needed", "product": "JumpCloud (directory / device management SaaS)", "tags": [ "jumpcloud", "north-korea", "phishing", "supply-chain", "crypto" ], "cveIds": [], "affectedVersions": [], "fixedVersions": [], "startedAt": "2023-06-27", "closedAt": "2023-07-20", "updatedAt": "2023-07-20", "summary": "A spear-phishing attack let a nation-state actor into JumpCloud's infrastructure. The attacker abused its command framework to target a small set of customers. JumpCloud force-rotated all customer API keys, and researchers tied the attack to North Korea, aimed at crypto companies.", "xPost": null }, { "slug": "3cx-desktopapp-supply-chain-attack-2023", "title": "3CX DesktopApp supply-chain attack (trojanized signed builds)", "url": "https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023", "json": "https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023.json", "status": "closed", "severity": "critical", "patchStatus": "patched", "product": "3CX DesktopApp (Electron)", "tags": [ "3cx", "supply-chain", "electron", "north-korea", "windows", "macos" ], "cveIds": [ "CVE-2023-29059" ], "affectedVersions": [ "Windows Electron app 18.12.407 and 18.12.416 (Update 7) (NVD)", "macOS Electron app 18.11.1213, 18.12.402, 18.12.407 and 18.12.416 (NVD)" ], "fixedVersions": [ "See vendor advisory" ], "startedAt": "2023-03-29", "closedAt": "2023-04-20", "updatedAt": "2023-04-20", "summary": "Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.", "xPost": null } ], "posts": [ { "authorName": "Help Net Security", "handle": "helpnetsecurity", "avatarUrl": "https://pbs.twimg.com/profile_images/1602979161932455937/3RwfWo0d_bigger.jpg", "text": "LiteLLM hit by second supply chain attack this year, users urged to rotate credentials - https://t.co/7iolIMAKe8 - @GossiTheDog @RockHudsonRock @cloudsek @wiz_io @AikidoSecurity @SocketSecurity - #LiteLLM #SupplyChainAttack #OpenSource #malware #Cybersecurity #CyberSecurityNews https://t.co/ZLPywonXYC", "date": "2026-10-22T13:26:50.000Z", "url": "https://x.com/helpnetsecurity/status/2113260794544796098", "media": [], "incident": "litellm-1-107-0-pypi-compromise" }, { "authorName": "The Hacker News", "handle": "TheHackersNews", "avatarUrl": "https://pbs.twimg.com/profile_images/1597647879811657728/FLgHrLHy_bigger.jpg", "text": "🚨 LiteLLM 1.107.0 compromised in a supply chain attack.\n\nMalicious PyPI packages and Docker images delivered a credential stealer and backdoor.\n\n⚠️ The malware runs at Python startup, targeting cloud credentials, private keys, and AI tool credentials.\n\n🔗 Full story: https://t.co/ANqBuYaGx5", "date": "2026-10-21T18:02:10.000Z", "url": "https://x.com/TheHackersNews/status/2112967698103894257", "media": [ { "type": "image", "url": "https://pbs.twimg.com/media/HVLE6tcakAATDtC.jpg" } ], "incident": "litellm-1-107-0-pypi-compromise" }, { "authorName": "Moshe Siman Tov Bustan", "handle": "MosheTov", "avatarUrl": "https://pbs.twimg.com/profile_images/1998067906706345984/SwYIhsPZ_bigger.jpg", "text": "❗ If 2 PHP vulns weren't enough for one day (or, 0-day?) - LiteLLM were compromised today by a combined RAT Infostealer malware!\n\nTLDR - LiteLLM PyPI ver 1.107.0 is compromised, if you installed it - revoke keys and change passwords ASAP.\n\nThe malware combines two threats in one https://t.co/WjpMeKcVgg", "date": "2026-10-21T15:46:21.000Z", "url": "https://x.com/MosheTov/status/2112933514962247891", "media": [ { "type": "image", "url": "https://pbs.twimg.com/media/HVKl1H6XQAAPSJw.jpg" } ], "incident": "litellm-1-107-0-pypi-compromise" }, { "authorName": "Cyber Security News", "handle": "The_Cyber_News", "avatarUrl": "https://pbs.twimg.com/profile_images/1174924326807592960/aJMuU6Ms_bigger.jpg", "text": "‼️ Breaking: LiteLLM Compromised – Infostealer and RAT Injected in 1.107.0 PyPI Release\n\nDetails: https://t.co/8rlH8xijjj\n\nLiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed https://t.co/caDoffOmFx", "date": "2026-10-21T15:21:29.000Z", "url": "https://x.com/The_Cyber_News/status/2112927256956088756", "media": [ { "type": "image", "url": "https://pbs.twimg.com/media/HVKf10bawAAfyb6.jpg" } ], "incident": "litellm-1-107-0-pypi-compromise" }, { "authorName": "Socket", "handle": "SocketSecurity", "avatarUrl": "https://pbs.twimg.com/profile_images/2057141188591824896/aKdKFNEE_bigger.jpg", "text": "🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.\n\nVersion 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools. https://t.co/4Mbt1LbhLu", "date": "2026-10-21T14:03:54.000Z", "url": "https://x.com/SocketSecurity/status/2112907732877775016", "media": [ { "type": "image", "url": "https://pbs.twimg.com/media/HVKNz_RWYAAoI1O.jpg" } ], "incident": "litellm-1-107-0-pypi-compromise" }, { "authorName": "Bhavesh Verma", "handle": "xbhaveshverma", "avatarUrl": "https://pbs.twimg.com/profile_images/2102764953153474560/GdTC_kqB_bigger.jpg", "text": "Tensorlake npm Package Poisoned by the Shai-Hulud Worm, Credential-Stealing Payload Targeted AI Agent Infrastructure and Carried a “Hostage Token” That Triggers Destruction if Revoked\n \nOn October 8, 2026, a malicious release of the tensorlake npm package, version 0.5.144, was", "date": "2026-10-14T07:30:00.000Z", "url": "https://x.com/xbhaveshverma/status/2110271890346623049", "media": [], "incident": "tensorlake-npm-shai-hulud-worm" }, { "authorName": "sunil kumawat", "handle": "Sunil_kumawat17", "avatarUrl": "https://pbs.twimg.com/profile_images/2098057965584732161/FSLSFQ4M_bigger.jpg", "text": "1/ npm: tensorlake@0.5.144 (Oct 8) shipped a Shai-Hulud-style worm in a preinstall hook. It hunts npm, GitHub and cloud creds plus .claude/.cursor configs.\n\nTreat the host as compromised. Socket: remove gh-token-monitor before revoking tokens, or it can wipe your home dir.", "date": "2026-10-12T03:42:11.000Z", "url": "https://x.com/Sunil_kumawat17/status/2109489785181991309", "media": [], "incident": "tensorlake-npm-shai-hulud-worm" }, { "authorName": "Techzine", "handle": "techzine", "avatarUrl": "https://pbs.twimg.com/profile_images/1240303566201511936/gHRGR8Fs_bigger.png", "text": "The Shai-Hulud worm infected the npm SDK of the AI platform Tensorlake. The malware steals credentials and can wipe home directories when tokens are revoked. dlvr.​it/TVrLFR #Security #npm #ShaiHulud #Socket #Tensorlake - Follow for more https://t.co/mLg7PlLPhr", "date": "2026-10-09T07:37:16.000Z", "url": "https://x.com/techzine/status/2108461779328332283", "media": [ { "type": "image", "url": "https://pbs.twimg.com/media/HULCz6Ga8AE7wrg.jpg" } ], "incident": "tensorlake-npm-shai-hulud-worm" }, { "authorName": "GMO Flatt Security Inc.", "handle": "flatt_sec_en", "avatarUrl": "https://pbs.twimg.com/profile_images/1403333053322121218/K05KKmYR_bigger.jpg", "text": "We have published a new blog post covering a recent software supply chain attack on the @subql/common npm package.\n\nIt covers technical details of the compromised package, as well as guidance on response if affected, as well as recommendations for users to protect against supply", "date": "2026-10-06T12:09:04.000Z", "url": "https://x.com/flatt_sec_en/status/2107443017829519848", "media": [], "incident": "subql-common-npm-backdoor" } ], "changes": [ { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-22", "title": "LiteLLM root cause: attacker held three developer GitHub CLI tokens, likely scraped from logs of an internet-exposed internal LiteLLM deployment (Claude Code can echo a gh OAuth token into logged response bodies), disabled branch protection and ran the release workflow against lookalike repo Berri-AI/litellm.", "body": null, "sourceUrl": "https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html", "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-22", "title": "StepSecurity full teardown: payload exfiltrates to lookalike www.litellm.dev (registered Oct 13) and an hourly loader polls a GitHub dead drop (letters9813/pythonclient-test, now deleted). Infected hosts keep polling, so anyone re-registering that username could run code on them: kill the process holding /tmp/remote_code_loader.lock, delete cook.pth/cook.py/sitecustomize.py, pin 1.106.2 and rotate everything.", "body": null, "sourceUrl": "https://www.stepsecurity.io/blog/litellm-1-107-0-compromised-pypi-backdoored-wheels-credential-stealer", "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-21T11:39Z", "title": "Malicious 1.107.0 wheels appear on PyPI.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-21T11:39Z", "title": "Malicious litellm==1.107.0 (all seven wheels) live on PyPI 11:39-13:23 UTC; Docker tags v1.107.0/latest/main-latest/main-stable compromised 11:46-14:20 UTC.", "body": null, "sourceUrl": "https://docs.litellm.ai/blog/security-incident-oct-21-2026", "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-21T13:23Z", "title": "PyPI quarantines/pulls the package (~2h window).", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-21T14:20Z", "title": "Docker Hub tags cleaned / retargeted; GHCR images made unavailable earlier.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-21T16:20Z", "title": "Wiz sees stolen AWS instance-role credentials validated from 168.100.8.57 and 165.227.201.8 (sts:GetCallerIdentity, then Bedrock model listing), consistent with LLMjacking.", "body": null, "sourceUrl": "https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html", "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-21T20:30Z", "title": "LiteLLM posts containment update; investigation ongoing.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "litellm-1-107-0-pypi-compromise", "incidentTitle": "LiteLLM 1.107.0 PyPI/Docker supply-chain compromise", "severity": "critical", "status": "live", "patchStatus": "patched", "date": "2026-10-19", "title": "LiteLLM temporarily expands release permissions for two internal engineers (daily bugfix backports).", "body": null, "sourceUrl": "https://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html", "url": "https://pwn.watch/i/litellm-1-107-0-pypi-compromise" }, { "incident": "subql-common-npm-backdoor", "incidentTitle": "SubQuery @subql/common 5.8.3 published with credential stealer + backdoor", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-10-10", "title": "SubQuery maintainer: compromised token deleted, security review started.", "body": null, "sourceUrl": "https://github.com/subquery/subql/issues/3047", "url": "https://pwn.watch/i/subql-common-npm-backdoor" }, { "incident": "tensorlake-npm-shai-hulud-worm", "incidentTitle": "tensorlake@0.5.144 npm Shai-Hulud worm with hostage GitHub token", "severity": "critical", "status": "live", "patchStatus": "partial", "date": "2026-10-08", "title": "0.5.144 published via the project’s release workflow.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/tensorlake-npm-shai-hulud-worm" }, { "incident": "tensorlake-npm-shai-hulud-worm", "incidentTitle": "tensorlake@0.5.144 npm Shai-Hulud worm with hostage GitHub token", "severity": "critical", "status": "live", "patchStatus": "partial", "date": "2026-10-08+", "title": "StepSecurity / Socket detections and public write-ups; remediation guidance emphasizes removing gh-token-monitor before revoke.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/tensorlake-npm-shai-hulud-worm" }, { "incident": "tensorlake-npm-shai-hulud-worm", "incidentTitle": "tensorlake@0.5.144 npm Shai-Hulud worm with hostage GitHub token", "severity": "critical", "status": "live", "patchStatus": "partial", "date": "2026-10-07", "title": "Malicious commits land on tensorlakeai/tensorlake main.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/tensorlake-npm-shai-hulud-worm" }, { "incident": "subql-common-npm-backdoor", "incidentTitle": "SubQuery @subql/common 5.8.3 published with credential stealer + backdoor", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-10-06", "title": "GMO Flatt Security publishes payload analysis and response guidance.", "body": null, "sourceUrl": "https://flatt.tech/research/posts/subql-common-npm-supply-chain-attack/", "url": "https://pwn.watch/i/subql-common-npm-backdoor" }, { "incident": "subql-common-npm-backdoor", "incidentTitle": "SubQuery @subql/common 5.8.3 published with credential stealer + backdoor", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-10-05T11:56Z", "title": "Malicious @subql/common 5.8.3 published via the repo's GitHub Actions trusted publisher (canary 5.8.3-onf-rt1 published ~32 min earlier).", "body": null, "sourceUrl": "https://www.stepsecurity.io/blog/subql-ecosystem-compromised", "url": "https://pwn.watch/i/subql-common-npm-backdoor" }, { "incident": "subql-common-npm-backdoor", "incidentTitle": "SubQuery @subql/common 5.8.3 published with credential stealer + backdoor", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-10-05T12:14Z", "title": "StepSecurity opens security issue #3047 in subquery/subql.", "body": null, "sourceUrl": "https://github.com/subquery/subql/issues/3047", "url": "https://pwn.watch/i/subql-common-npm-backdoor" }, { "incident": "subql-common-npm-backdoor", "incidentTitle": "SubQuery @subql/common 5.8.3 published with credential stealer + backdoor", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-10-05T12:46Z", "title": "GitHub publishes malware advisory GHSA-9333-3c4x-x3h5; version removed from npm (~50 minutes live); 'latest' back to 5.8.2.", "body": null, "sourceUrl": "https://github.com/advisories/GHSA-9333-3c4x-x3h5", "url": "https://pwn.watch/i/subql-common-npm-backdoor" }, { "incident": "shai-hulud-chaindrop-npm-keyv-august", "incidentTitle": "CHAINDROP / Mini Shai-Hulud npm worm (keyv + 400+ packages)", "severity": "critical", "status": "closed", "patchStatus": "partial", "date": "2026-08-04", "title": "keyv/cacheable malicious releases observed; worm begins propagating.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/shai-hulud-chaindrop-npm-keyv-august" }, { "incident": "shai-hulud-chaindrop-npm-keyv-august", "incidentTitle": "CHAINDROP / Mini Shai-Hulud npm worm (keyv + 400+ packages)", "severity": "critical", "status": "closed", "patchStatus": "partial", "date": "2026-08-04/06", "title": "Microsoft, Elastic, JFrog publish analyses; 400+ packages listed.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/shai-hulud-chaindrop-npm-keyv-august" }, { "incident": "nx-nx-console-cve-2026-48027", "incidentTitle": "Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2026-05-27", "title": "CISA added CVE-2026-48027 to the KEV catalog (due 2026-06-10).", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/nx-nx-console-cve-2026-48027" }, { "incident": "teampcp-trivy-checkmarx-supply-chain", "incidentTitle": "TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-03", "title": "Trivy compromise disclosed; Microsoft guidance published.", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain" }, { "incident": "teampcp-trivy-checkmarx-supply-chain", "incidentTitle": "TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2026-03", "title": "Campaign expands to Checkmarx GitHub Actions (Sysdig / Checkmarx updates).", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/teampcp-trivy-checkmarx-supply-chain" }, { "incident": "asus-live-update-cve-2025-59374", "incidentTitle": "ASUS Live Update: Live Update Embedded Malicious Code Vulnerability", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-12-17", "title": "CISA added CVE-2025-59374 to the KEV catalog (due 2026-01-07).", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/asus-live-update-cve-2025-59374" }, { "incident": "shai-hulud-2-npm-worm-november-2025", "incidentTitle": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-11-26", "title": "GitHub privatizes malicious repos; public count drops to ~300", "body": null, "sourceUrl": "https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025" }, { "incident": "shai-hulud-2-npm-worm-november-2025", "incidentTitle": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-11-26", "title": "PostHog publishes its post-mortem", "body": null, "sourceUrl": "https://posthog.com/blog/nov-24-shai-hulud-attack-post-mortem", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025" }, { "incident": "shai-hulud-2-npm-worm-november-2025", "incidentTitle": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-11-24", "title": "First compromised package published (03:10 UTC)", "body": null, "sourceUrl": "https://panther.com/blog/a-data-driven-analysis-of-the-sha1-hulud-2-0-campaign", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025" }, { "incident": "shai-hulud-2-npm-worm-november-2025", "incidentTitle": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-11-24", "title": "PostHog SDKs compromised (04:11 UTC); removed and tokens revoked by 09:30 UTC", "body": null, "sourceUrl": "https://posthog.com/blog/nov-24-shai-hulud-attack-post-mortem", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025" }, { "incident": "shai-hulud-2-npm-worm-november-2025", "incidentTitle": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-11-24", "title": "Postman unpublishes 17 infected packages (51 versions)", "body": null, "sourceUrl": "https://blog.postman.com/engineering/shai-hulud-2-0-npm-supply-chain-attack/", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025" }, { "incident": "shai-hulud-2-npm-worm-november-2025", "incidentTitle": "Shai-Hulud 2.0: worm backdoors ~800 npm packages incl. Zapier, PostHog, Postman, ENS", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-11-24", "title": "Last compromised package seen (~17:00-18:00 UTC)", "body": null, "sourceUrl": "https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/", "url": "https://pwn.watch/i/shai-hulud-2-npm-worm-november-2025" }, { "incident": "glassworm-vscode-openvsx-worm-october-2025", "incidentTitle": "GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2025-10-20", "title": "Wider coverage; Microsoft marketplace extension also affected", "body": null, "sourceUrl": "https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/", "url": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025" }, { "incident": "glassworm-vscode-openvsx-worm-october-2025", "incidentTitle": "GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2025-10-17", "title": "Koi Security discloses GlassWorm on OpenVSX", "body": null, "sourceUrl": "https://www.koi.ai/blog/glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-marketplace", "url": "https://pwn.watch/i/glassworm-vscode-openvsx-worm-october-2025" }, { "incident": "shai-hulud-npm-worm-september-2025", "incidentTitle": "Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-23", "title": "CISA alert: widespread supply chain compromise impacting npm (500+ packages)", "body": null, "sourceUrl": "https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem", "url": "https://pwn.watch/i/shai-hulud-npm-worm-september-2025" }, { "incident": "shai-hulud-npm-worm-september-2025", "incidentTitle": "Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-16", "title": "Largest burst, nearly 100 packages, including @crowdstrike scope", "body": null, "sourceUrl": "https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages", "url": "https://pwn.watch/i/shai-hulud-npm-worm-september-2025" }, { "incident": "shai-hulud-npm-worm-september-2025", "incidentTitle": "Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-15", "title": "Worm discovered; @ctrl/tinycolor and ~40 packages found compromised", "body": null, "sourceUrl": "https://www.sysdig.com/blog/shai-hulud-the-novel-self-replicating-worm-infecting-hundreds-of-npm-packages", "url": "https://pwn.watch/i/shai-hulud-npm-worm-september-2025" }, { "incident": "chalk-debug-npm-hijack-september-2025", "incidentTitle": "chalk, debug and 16 other npm packages (2B+ weekly downloads) hijacked via fake 2FA email", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-15", "title": "Initial CVEs posted", "body": null, "sourceUrl": "https://github.com/debug-js/debug/issues/1005", "url": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025" }, { "incident": "shai-hulud-npm-worm-september-2025", "incidentTitle": "Shai-Hulud: first self-replicating npm worm hits 500+ packages incl. @ctrl/tinycolor and CrowdStrike", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-14", "title": "First compromised versions published (17:58 UTC)", "body": null, "sourceUrl": "https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages", "url": "https://pwn.watch/i/shai-hulud-npm-worm-september-2025" }, { "incident": "chalk-debug-npm-hijack-september-2025", "incidentTitle": "chalk, debug and 16 other npm packages (2B+ weekly downloads) hijacked via fake 2FA email", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-13", "title": "All remaining affected packages republished by the maintainer", "body": null, "sourceUrl": "https://github.com/debug-js/debug/issues/1005", "url": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025" }, { "incident": "chalk-debug-npm-hijack-september-2025", "incidentTitle": "chalk, debug and 16 other npm packages (2B+ weekly downloads) hijacked via fake 2FA email", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-08", "title": "Malicious versions start appearing on npm (13:16 UTC)", "body": null, "sourceUrl": "https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised", "url": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025" }, { "incident": "chalk-debug-npm-hijack-september-2025", "incidentTitle": "chalk, debug and 16 other npm packages (2B+ weekly downloads) hijacked via fake 2FA email", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-08", "title": "Sindre Sorhus publishes clean chalk-family versions over the compromised ones", "body": null, "sourceUrl": "https://github.com/chalk/chalk/issues/656", "url": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025" }, { "incident": "chalk-debug-npm-hijack-september-2025", "incidentTitle": "chalk, debug and 16 other npm packages (2B+ weekly downloads) hijacked via fake 2FA email", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-09-08", "title": "npm takes down all impacted versions (21:59 CEST); maintainer account restored (23:48 CEST)", "body": null, "sourceUrl": "https://github.com/debug-js/debug/issues/1005", "url": "https://pwn.watch/i/chalk-debug-npm-hijack-september-2025" }, { "incident": "salesloft-drift-oauth-salesforce-data-theft-2025", "incidentTitle": "Salesloft Drift OAuth tokens used to raid 700+ companies' Salesforce data (UNC6395)", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-09-02", "title": "Cloudflare details the impact on its Salesforce case data", "body": null, "sourceUrl": "https://blog.cloudflare.com/response-to-salesloft-drift-incident/", "url": "https://pwn.watch/i/salesloft-drift-oauth-salesforce-data-theft-2025" }, { "incident": "nx-s1ngularity-npm-supply-chain-august-2025", "incidentTitle": "s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-08-28/29", "title": "Second phase: 5,500+ private repos of 400+ users/orgs made public with stolen tokens", "body": null, "sourceUrl": "https://www.wiz.io/blog/s1ngularity-supply-chain-attack", "url": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025" }, { "incident": "nx-s1ngularity-npm-supply-chain-august-2025", "incidentTitle": "s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-08-27", "title": "GitHub disables attacker-created s1ngularity repositories (09:00 UTC)", "body": null, "sourceUrl": "https://www.wiz.io/blog/s1ngularity-supply-chain-attack", "url": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025" }, { "incident": "nx-s1ngularity-npm-supply-chain-august-2025", "incidentTitle": "s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-08-26", "title": "Malicious nx 21.5.0 and others published; npm removes them and revokes tokens that evening", "body": null, "sourceUrl": "https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c", "url": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025" }, { "incident": "salesloft-drift-oauth-salesforce-data-theft-2025", "incidentTitle": "Salesloft Drift OAuth tokens used to raid 700+ companies' Salesforce data (UNC6395)", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-08-26", "title": "Google Threat Intelligence publishes UNC6395 findings", "body": null, "sourceUrl": "https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift", "url": "https://pwn.watch/i/salesloft-drift-oauth-salesforce-data-theft-2025" }, { "incident": "nx-s1ngularity-npm-supply-chain-august-2025", "incidentTitle": "s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-08-24", "title": "Attacker exploits the workflow and exfiltrates the npm token", "body": null, "sourceUrl": "https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c", "url": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025" }, { "incident": "nx-s1ngularity-npm-supply-chain-august-2025", "incidentTitle": "s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-08-21", "title": "A PR adds a GitHub Actions workflow with an injection bug to nrwl/nx", "body": null, "sourceUrl": "https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c", "url": "https://pwn.watch/i/nx-s1ngularity-npm-supply-chain-august-2025" }, { "incident": "salesloft-drift-oauth-salesforce-data-theft-2025", "incidentTitle": "Salesloft Drift OAuth tokens used to raid 700+ companies' Salesforce data (UNC6395)", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-08-20", "title": "Salesloft and Salesforce revoke Drift access and refresh tokens; Drift pulled from AppExchange", "body": null, "sourceUrl": "https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift", "url": "https://pwn.watch/i/salesloft-drift-oauth-salesforce-data-theft-2025" }, { "incident": "salesloft-drift-oauth-salesforce-data-theft-2025", "incidentTitle": "Salesloft Drift OAuth tokens used to raid 700+ companies' Salesforce data (UNC6395)", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-08-08", "title": "Data theft from Salesforce instances begins (through Aug 18)", "body": null, "sourceUrl": "https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift", "url": "https://pwn.watch/i/salesloft-drift-oauth-salesforce-data-theft-2025" }, { "incident": "eslint-config-prettier-npm-phishing-cve-2025-54313", "incidentTitle": "eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313)", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2025-07-22", "title": "Malicious 'is' package versions found in the same campaign", "body": null, "sourceUrl": "https://socket.dev/blog/npm-is-package-hijacked-in-expanding-supply-chain-attack", "url": "https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313" }, { "incident": "eslint-config-prettier-npm-phishing-cve-2025-54313", "incidentTitle": "eslint-config-prettier and friends hijacked via npnjs.com phishing (CVE-2025-54313)", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2025-07-18", "title": "Malicious eslint-config-prettier versions published after maintainer phishing", "body": null, "sourceUrl": "https://www.cve.org/CVERecord?id=CVE-2025-54313", "url": "https://pwn.watch/i/eslint-config-prettier-npm-phishing-cve-2025-54313" }, { "incident": "reviewdog-action-setup-github-action-cve-2025-30154", "incidentTitle": "reviewdog action-setup GitHub Action: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2025-03-24", "title": "CISA added CVE-2025-30154 to the KEV catalog (due 2025-04-14).", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/reviewdog-action-setup-github-action-cve-2025-30154" }, { "incident": "tj-actions-changed-files-supply-chain-cve-2025-30066", "incidentTitle": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-03-20", "title": "tj-actions and reviewdog maintainers finish remediation", "body": null, "sourceUrl": "https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/", "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066" }, { "incident": "tj-actions-changed-files-supply-chain-cve-2025-30066", "incidentTitle": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-03-18", "title": "CISA adds CVE-2025-30066 to KEV; reviewdog actions found compromised too", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066" }, { "incident": "tj-actions-changed-files-supply-chain-cve-2025-30066", "incidentTitle": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-03-15", "title": "GitHub removes the action, then restores a cleaned repository", "body": null, "sourceUrl": "https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised", "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066" }, { "incident": "tj-actions-changed-files-supply-chain-cve-2025-30066", "incidentTitle": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-03-14", "title": "Coinbase agentkit runs the malicious action and leaks a write token (15:10 UTC)", "body": null, "sourceUrl": "https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/", "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066" }, { "incident": "tj-actions-changed-files-supply-chain-cve-2025-30066", "incidentTitle": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-03-14", "title": "All tj-actions/changed-files tags replaced with malicious commits (16:57 UTC); StepSecurity detects it", "body": null, "sourceUrl": "https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised", "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066" }, { "incident": "tj-actions-changed-files-supply-chain-cve-2025-30066", "incidentTitle": "tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2025-03-11", "title": "Malicious commit pushed to reviewdog/action-setup v1 tag", "body": "Reverted about two hours later.", "sourceUrl": "https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/", "url": "https://pwn.watch/i/tj-actions-changed-files-supply-chain-cve-2025-30066" }, { "incident": "bybit-1-5b-hack-safe-wallet-february-2025", "incidentTitle": "Bybit loses ~$1.5B in ETH after Safe{Wallet} frontend is trojanized (North Korea)", "severity": "critical", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-03-06", "title": "Safe{Wallet} confirms a developer machine compromise by TraderTraitor", "body": null, "sourceUrl": "https://thehackernews.com/2025/03/safewallet-confirms-north-korean.html", "url": "https://pwn.watch/i/bybit-1-5b-hack-safe-wallet-february-2025" }, { "incident": "bybit-1-5b-hack-safe-wallet-february-2025", "incidentTitle": "Bybit loses ~$1.5B in ETH after Safe{Wallet} frontend is trojanized (North Korea)", "severity": "critical", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-02-26", "title": "FBI attributes the theft to North Korea ('TraderTraitor')", "body": null, "sourceUrl": "https://www.ic3.gov/psa/2025/psa250226", "url": "https://pwn.watch/i/bybit-1-5b-hack-safe-wallet-february-2025" }, { "incident": "bybit-1-5b-hack-safe-wallet-february-2025", "incidentTitle": "Bybit loses ~$1.5B in ETH after Safe{Wallet} frontend is trojanized (North Korea)", "severity": "critical", "status": "closed", "patchStatus": "no-fix-needed", "date": "2025-02-21", "title": "About $1.5B in ETH drained from a Bybit cold wallet", "body": null, "sourceUrl": null, "url": "https://pwn.watch/i/bybit-1-5b-hack-safe-wallet-february-2025" }, { "incident": "ultralytics-pypi-supply-chain-attack", "incidentTitle": "Ultralytics PyPI releases backdoored with a crypto miner", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-12-11", "title": "PyPI publishes its analysis: 8.3.41, 8.3.42, 8.3.45 and 8.3.46 affected and removed", "body": null, "sourceUrl": "https://blog.pypi.org/posts/2024-12-11-ultralytics-attack-analysis/", "url": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack" }, { "incident": "ultralytics-pypi-supply-chain-attack", "incidentTitle": "Ultralytics PyPI releases backdoored with a crypto miner", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-12-05", "title": "Issue #18027: published 8.3.41 wheel differs from GitHub and runs an XMRig miner", "body": null, "sourceUrl": "https://github.com/ultralytics/ultralytics/issues/18027", "url": "https://pwn.watch/i/ultralytics-pypi-supply-chain-attack" }, { "incident": "solana-web3-js-npm-compromise-cve-2024-54134", "incidentTitle": "@solana/web3.js npm package backdoored to steal private keys", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-12-04", "title": "GitHub advisory GHSA-jcxm-7wvp-g6p5 published; upgrade to 1.95.8", "body": null, "sourceUrl": "https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5", "url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134" }, { "incident": "solana-web3-js-npm-compromise-cve-2024-54134", "incidentTitle": "@solana/web3.js npm package backdoored to steal private keys", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-12-03", "title": "Malicious 1.95.6 and 1.95.7 published to npm (15:20-20:25 UTC), then unpublished", "body": null, "sourceUrl": "https://github.com/solana-labs/solana-web3.js/security/advisories/GHSA-jcxm-7wvp-g6p5", "url": "https://pwn.watch/i/solana-web3-js-npm-compromise-cve-2024-54134" }, { "incident": "lottiefiles-lottie-player-npm-compromise", "incidentTitle": "@lottiefiles/lottie-player npm package hijacked with a crypto wallet drainer", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-10-30", "title": "Malicious 2.0.5, 2.0.6 and 2.0.7 pushed to npm; users report a wallet popup", "body": null, "sourceUrl": "https://github.com/LottieFiles/lottie-player/issues/254", "url": "https://pwn.watch/i/lottiefiles-lottie-player-npm-compromise" }, { "incident": "lottiefiles-lottie-player-npm-compromise", "incidentTitle": "@lottiefiles/lottie-player npm package hijacked with a crypto wallet drainer", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-10-30", "title": "LottieFiles removes the compromised access, unpublishes the versions and publishes 2.0.8", "body": null, "sourceUrl": "https://github.com/LottieFiles/lottie-player/issues/254", "url": "https://pwn.watch/i/lottiefiles-lottie-player-npm-compromise" }, { "incident": "polyfill-io-supply-chain-attack", "incidentTitle": "polyfill.io CDN turned malicious on 100k+ sites", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-06-27", "title": "Cloudflare rewrites cdn.polyfill.io to its mirror; Namecheap puts the domain on hold", "body": null, "sourceUrl": "https://sansec.io/research/polyfill-supply-chain-attack", "url": "https://pwn.watch/i/polyfill-io-supply-chain-attack" }, { "incident": "polyfill-io-supply-chain-attack", "incidentTitle": "polyfill.io CDN turned malicious on 100k+ sites", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-06-25", "title": "Sansec reports the polyfill.io supply-chain attack hitting 100k+ sites", "body": null, "sourceUrl": "https://sansec.io/research/polyfill-supply-chain-attack", "url": "https://pwn.watch/i/polyfill-io-supply-chain-attack" }, { "incident": "justice-av-solutions-viewer-cve-2024-4978", "incidentTitle": "Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-05-29", "title": "CISA added CVE-2024-4978 to the KEV catalog (federal deadline 2024-06-19)", "body": null, "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "url": "https://pwn.watch/i/justice-av-solutions-viewer-cve-2024-4978" }, { "incident": "xz-utils-backdoor-cve-2024-3094", "incidentTitle": "xz-utils backdoor (CVE-2024-3094)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2024-05-29", "title": "Lasse Collin publishes review notes 1.0 and new clean XZ Utils releases", "body": null, "sourceUrl": "https://tukaani.org/xz-backdoor/", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094" }, { "incident": "justice-av-solutions-viewer-cve-2024-4978", "incidentTitle": "Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code", "severity": "high", "status": "closed", "patchStatus": "patched", "date": "2024-05-23", "title": "CVE-2024-4978 published", "body": null, "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4978", "url": "https://pwn.watch/i/justice-av-solutions-viewer-cve-2024-4978" }, { "incident": "xz-utils-backdoor-cve-2024-3094", "incidentTitle": "xz-utils backdoor (CVE-2024-3094)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2024-04-09", "title": "XZ Git repositories available on GitHub again", "body": null, "sourceUrl": "https://tukaani.org/xz-backdoor/", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094" }, { "incident": "xz-utils-backdoor-cve-2024-3094", "incidentTitle": "xz-utils backdoor (CVE-2024-3094)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2024-03-30", "title": "xz@tukaani.org stops forwarding to Jia Tan", "body": null, "sourceUrl": "https://tukaani.org/xz-backdoor/", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094" }, { "incident": "xz-utils-backdoor-cve-2024-3094", "incidentTitle": "xz-utils backdoor (CVE-2024-3094)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2024-03-29", "title": "Andres Freund discloses the backdoor on oss-security", "body": null, "sourceUrl": "https://www.openwall.com/lists/oss-security/2024/03/29/4", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094" }, { "incident": "xz-utils-backdoor-cve-2024-3094", "incidentTitle": "xz-utils backdoor (CVE-2024-3094)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2024-03-29", "title": "CISA alert: downgrade XZ Utils to an uncompromised version such as 5.4.6", "body": null, "sourceUrl": "https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094" }, { "incident": "xz-utils-backdoor-cve-2024-3094", "incidentTitle": "xz-utils backdoor (CVE-2024-3094)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2024-03-29", "title": "Red Hat urgent security alert for Fedora 41 and Rawhide users", "body": null, "sourceUrl": "https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users", "url": "https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094" }, { "incident": "ledger-connect-kit-npm-supply-chain-2023", "incidentTitle": "Ledger Connect Kit npm package hijacked to drain crypto wallets", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2023-12-14", "title": "Malicious connect-kit versions published to npm via a phished ex-employee account; Ledger ships 1.1.8 and the npm versions are removed", "body": null, "sourceUrl": "https://www.ledger.com/blog/security-incident-report", "url": "https://pwn.watch/i/ledger-connect-kit-npm-supply-chain-2023" }, { "incident": "jumpcloud-nation-state-breach-2023", "incidentTitle": "JumpCloud breached by North Korean hackers to reach crypto customers", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2023-07-20", "title": "SentinelOne links the intrusion infrastructure to North Korean APT activity", "body": null, "sourceUrl": "https://www.sentinelone.com/labs/jumpcloud-intrusion-attacker-infrastructure-links-compromise-to-north-korean-apt-activity/", "url": "https://pwn.watch/i/jumpcloud-nation-state-breach-2023" }, { "incident": "jumpcloud-nation-state-breach-2023", "incidentTitle": "JumpCloud breached by North Korean hackers to reach crypto customers", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2023-07-12", "title": "JumpCloud publishes incident details and indicators", "body": null, "sourceUrl": "https://jumpcloud.com/blog/security-update-incident-details", "url": "https://pwn.watch/i/jumpcloud-nation-state-breach-2023" }, { "incident": "jumpcloud-nation-state-breach-2023", "incidentTitle": "JumpCloud breached by North Korean hackers to reach crypto customers", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2023-07-05", "title": "JumpCloud rotates all customer API keys", "body": null, "sourceUrl": "https://jumpcloud.com/blog/security-update-incident-details", "url": "https://pwn.watch/i/jumpcloud-nation-state-breach-2023" }, { "incident": "jumpcloud-nation-state-breach-2023", "incidentTitle": "JumpCloud breached by North Korean hackers to reach crypto customers", "severity": "high", "status": "closed", "patchStatus": "no-fix-needed", "date": "2023-06-27", "title": "JumpCloud finds anomalous activity on an internal orchestration system", "body": null, "sourceUrl": "https://jumpcloud.com/blog/security-update-incident-details", "url": "https://pwn.watch/i/jumpcloud-nation-state-breach-2023" }, { "incident": "3cx-desktopapp-supply-chain-attack-2023", "incidentTitle": "3CX DesktopApp supply-chain attack (trojanized signed builds)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2023-04-20", "title": "Mandiant: the 3CX breach began with a trojanized X_TRADER package, the first software supply-chain attack it had seen caused by another", "body": null, "sourceUrl": "https://cloud.google.com/blog/topics/threat-intelligence/3cx-software-supply-chain-compromise", "url": "https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023" }, { "incident": "3cx-desktopapp-supply-chain-attack-2023", "incidentTitle": "3CX DesktopApp supply-chain attack (trojanized signed builds)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2023-03-30", "title": "3CX confirms the compromise and tells customers to uninstall the Electron desktop app", "body": null, "sourceUrl": "https://www.3cx.com/blog/news/desktopapp-security-alert/", "url": "https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023" }, { "incident": "3cx-desktopapp-supply-chain-attack-2023", "incidentTitle": "3CX DesktopApp supply-chain attack (trojanized signed builds)", "severity": "critical", "status": "closed", "patchStatus": "patched", "date": "2023-03-29", "title": "CrowdStrike reports malicious activity from the signed 3CXDesktopApp on customer machines", "body": null, "sourceUrl": "https://www.crowdstrike.com/en-us/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/", "url": "https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023" } ] }