supply chain attack Archives • Daily CyberSecurity

arrayref Rust Crate Hijacked in Supply Chain Attack With DPRK Infrastructure Overlap Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

arrayref Rust Crate Hijacked in Supply Chain Attack With DPRK Infrastructure Overlap

Do Son August 20, 2026

At a Glance Actor Unattributed; infrastructure overlaps with DPRK-linked activity (Wiz) Activity Software supply chain attack via...

GEEKOM Mini PC Driver Downloads Found Bundled With Backdoor Since 2024 GEEKOM driver backdoor malware mini PC AMD infected download page

GEEKOM Mini PC Driver Downloads Found Bundled With Backdoor Since 2024

Do Son August 18, 2026

Domestic mini PC manufacturer GEEKOM was recently discovered to be distributing driver downloads through its official website...

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2 ChainDrop npm worm supply chain malware stealing cloud credentials via Ethereum blockchain C2

ChainDrop npm worm supply chain malware stealing cloud credentials via Ethereum blockchain C2

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2

Do Son August 13, 2026

At a glance Malware family ChainDrop (Shai-Hulud code lineage) Threat actor Unattributed; possible link to TeamPCP (not...

BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins BdThemes supply chain attack diagram showing a poisoned WordPress plugin API feed injecting XSS into an admin dashboard

BdThemes supply chain attack diagram showing a poisoned WordPress plugin API feed injecting XSS into an admin dashboard

BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins

Do Son August 9, 2026

At a Glance Malware family API-driven XSS supply chain implant (Biggopti banner abuse) Threat actor Suspected; linked...

QuickFox Supply Chain Attack Delivers FDMTP Implant to Windows Users malware-code

QuickFox Supply Chain Attack Delivers FDMTP Implant to Windows Users

Do Son August 7, 2026

At a Glance Attribute Detail Malware family FDMTP implant (.NET, TouchSocket-based) Threat actor Suspected Twill Typhoon (not...

XCSSET v40 Malware Targets macOS Developers Through Xcode XCSSET v40 malware infection chain showing Xcode project supply chain attack on macOS

XCSSET v40 malware infection chain showing Xcode project supply chain attack on macOS

XCSSET v40 Malware Targets macOS Developers Through Xcode

Do Son August 6, 2026

At a glance Malware family XCSSET (version 40) Threat actor Unattributed; tracked by Unit 42 since 2020,...

XMRig Botnet Abuses Linux PAM to Spread Forensic Smokescreen Across User Accounts XMRig Linux PAM abuse fileless cryptominer V25 botnet forensic smokescreen

XMRig Linux PAM abuse fileless cryptominer V25 botnet forensic smokescreen

XMRig Botnet Abuses Linux PAM to Spread Forensic Smokescreen Across User Accounts

Do Son August 5, 2026

At a glance Field Detail Malware family Modified XMRig 6.25.0 botnet implant (marked “PRIVATE VERSION FOR BOTNET”),...

Adform Cyber Attack: Malicious Scripts Hijack Crypto Wallets CVE-2026-18072 video embedder backdoor authentication bypass

Adform Cyber Attack: Malicious Scripts Hijack Crypto Wallets

Do Son August 5, 2026

Adform, a prominent European advertising technology enterprise, recently disclosed a severe security breach. Hackers successfully compromised the...

npm Supply Chain Attack Hijacks Keyv and Spreads Shai-Hulud Malware npm supply chain attack on keyv and cacheable packages spreading Shai-Hulud malware credential stealer to CI/CD pipelines

npm supply chain attack on keyv and cacheable packages spreading Shai-Hulud malware credential stealer to CI/CD pipelines

npm Supply Chain Attack Hijacks Keyv and Spreads Shai-Hulud Malware

Do Son August 4, 2026

At a glance Malware family Shai-Hulud variant (“Mini Shai-Hulud”) Threat actor Unattributed; linked to the Shai-Hulud lineage...

Amazon Links North Korean Hackers to NPM Supply Chain Attacks North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

Amazon Links North Korean Hackers to NPM Supply Chain Attacks

Do Son August 4, 2026

At a glance Actor DPRK-linked group (Sapphire Sleet, Stardust Chollima, BlueNoroff, UNC1069) Activity NPM supply chain compromise...

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants

Do Son July 27, 2026

At a glance Actor or group Kimsuky, a North Korea-linked group also tracked as Springtail, Thallium and...

GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

GitHub Actions Abuse Powers a Distributed cPanel and WHM Attack Campaign

Do Son July 23, 2026

At a Glance Actor or group Unattributed threat actor; no group name published Activity type GitHub Actions...

Fake Braintree NuGet Package Skims Credit Cards and Steals Merchant API Keys Braintree NuGet typosquat credit card skimmer stealing payment data and merchant API keys

Braintree NuGet typosquat credit card skimmer stealing payment data and merchant API keys

Fake Braintree NuGet Package Skims Credit Cards and Steals Merchant API Keys

Do Son July 15, 2026

At a Glance Malware family Braintree.Net typosquat, a multi-stage .NET implant with a companion harvester (DependencyInjector.Core) Threat...

PolinRider supply chain attack diagram showing North Korean hackers hiding loaders in open-source packages

North Korea-Linked PolinRider Supply Chain Attack Expands Across Open Source

Do Son July 9, 2026

At a Glance Actor / group Suspected North Korean actors in the Contagious Interview / Famous Chollima...

FBI Warns of TeamPCP Supply Chain Attack TeamPCP supply chain attack and software supply chain compromise alert

FBI Warns of TeamPCP Supply Chain Attack

Do Son July 4, 2026

At a glance Actor TeamPCP Activity type Software supply chain compromise Targets Enterprise developers, security tools Scale...

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills Lazarus npm malware masquerading as Rollup polyfill packages in a supply chain attack

Lazarus npm malware masquerading as Rollup polyfill packages in a supply chain attack

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

Do Son July 3, 2026

At a glance Actor Suspected North Korean Lazarus-linked group (attribution by TTP similarity) Activity npm supply chain...

LastPass Customer Data Stolen in Klue Supply Chain Breach LastPass Klue breach OAuth token theft Salesforce supply chain attack

LastPass Customer Data Stolen in Klue Supply Chain Breach

Do Son June 23, 2026

At a Glance Organization LastPass (via vendor Klue) Data exposed CRM contact and support data: names, emails,...

GlassWASM Malware Hidden in Open VSX Extensions code

GlassWASM Malware Hidden in Open VSX Extensions

Do Son June 20, 2026

Security researchers have uncovered GlassWASM malware, a stealthy threat hiding inside trojanized Visual Studio Code extensions. Socket’s...

Mastra Supply Chain Attack Compromises 140+ npm Packages Mastra supply chain attack delivering an npm infostealer through the typosquatted easy-day-js dependency during npm install

Mastra supply chain attack delivering an npm infostealer through the typosquatted easy-day-js dependency during npm install

Mastra Supply Chain Attack Compromises 140+ npm Packages

Do Son June 17, 2026

A sweeping Mastra supply chain attack has hit the JavaScript ecosystem hard. Security firm Socket detected the...

ShapedPlugin Supply Chain Attack CVE-2026-10735, CVE-2026-49777, WordPress Plugin Malware

ShapedPlugin Supply Chain Attack Exposes WordPress Sites

Do Son June 16, 2026

A dangerous ShapedPlugin supply chain attack is currently threatening WordPress websites. Security researchers at Wordfence discovered this...

Uncanny Automator Breach: Backdoored Plugin Build Hit WordPress Sites

Do Son June 15, 2026

A serious Uncanny Automator breach has exposed customer data and pushed a malicious plugin update to live...

Massive PyPI Supply Chain Attack Staged via Malware Startup Hooks PyPI supply chain attack Socket malware detection PyPI Typosquat, Python RAT

PyPI supply chain attack Socket malware detection PyPI Typosquat, Python RAT

Massive PyPI Supply Chain Attack Staged via Malware Startup Hooks

Do Son June 7, 2026

Overview of the Global Fraud Threat Cybersecurity researchers have just detected a dangerous software campaign targeting Python...

Critical Alert 1 Active Exploit Detected Today