1.LiteLLM Compromised, Steals Credentialsblog | 2026-10-21 13:44 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #supply-chain
2.LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hookstool | 2026-10-12 08:59 | github.com | Original ↗ | .md | #credential-theft | #microsoft | #windows
3.The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environmentsblog | 2026-09-25 14:51 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #cloud-security
4.keyv and cacheable npm Package Hijacked in Supply Chain Attackincident | 2026-08-04 11:25 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #malware
5.Keyv and friends compromised in active Shai-Hulud supply chain attackincident | 2026-08-04 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #malware
6.SleeperGem: RubyGems supply chain attack targets dormant maintainer accountsincident | 2026-07-19 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #ruby
7.Anthropic's Fever Dream: Claude's package that stole real keysblog | 2026-07-31 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
8.Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetryincident | 2026-07-09 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #web3 | #featured
9.MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extensionblog | 2026-06-26 12:00 | CVE-2026-12957 | wiz.io | Original ↗ | .md | #cloud | #vulnerability-research | #credential-theft
10.Chinese-speaking Operators Clone FIFA's World Cup 2026 Ticketing Site To Steal Fan Logins and Card Datablog | 2026-06-17 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #credential-theft | #data-exposure
11.Multiple JetBrains IDE plugins caught stealing AI keysblog | 2026-06-16 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
12.Shai-Hulud copycat campaign targets Python developers through PyPI typosquattingblog | 2026-06-09 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #malware | #credential-theft
13.Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealerincident | 2026-05-23 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #credential-theft
14.Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokensblog | 2026-05-27 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
15.durabletask: TeamPCP's Latest PyPi Compromiseblog | 2026-05-19 17:30 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
16.The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Waveblog | 2026-05-19 08:29 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #credential-theft
17.How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Accountresearch | 2026-05-14 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
18.Shai Hulud and Looking Into the Deep End of Supply Chain Mayhemblog | 2026-05-16 00:00 | abdulmhsblog.com | Original ↗ | .md | #supply-chain | #credential-theft | #npm
19.Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstackblog | 2026-05-12 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
20.Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malwareblog | 2026-04-29 15:14 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #kubernetes
21.Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealerblog | 2026-04-29 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #secrets | #malware
22.Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Wormblog | 2026-04-23 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #credential-theft
23.33K Exposed LiteLLM Deployments and the C2 Servers Behind TeamPCP's Supply Chain Attackincident | 2026-03-27 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #kubernetes | #credential-theft
24.Tracking TeamPCP: Investigating Post-Compromise Attacks Seen in the Wildblog | 2026-03-30 23:54 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #cloud-security
25.LiteLLM Supply Chain Compromiseincident | 2026-03-24 00:00 | netspi.com | Original ↗ | .md | #ai-security | #supply-chain | #incident-response
26.Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaignblog | 2026-03-24 18:40 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
27.Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaignsresearch | 2025-12-17 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
28.Shai-Hulud npm supply chain attack – new compromised packages detectedincident | 2025-11-24 19:03 | jfrog.com | Original ↗ | .md | #ai-security | #cloud | #supply-chain
29.Shai-Hulud 2.0: What Security Leaders Need to Do Nowblog | 2025-11-26 15:05 | hackerone.com | Original ↗ | .md | #supply-chain | #secrets | #malware
30.IMDS Abused: Hunting Rare Behaviors to Uncover Exploitsblog | 2025-09-22 14:50 | wiz.io | Original ↗ | .md | #zero-day | #cloud-security | #threat-detection