1.Record Malware Execution in a Single Prompt with Epochresearch | 2026-10-14 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #malware
2.Novel supplychain.local Go worm appearsresearch | 2026-09-23 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #aikido
3.PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Huntingresearch | 2026-09-15 00:00 | crowdstrike.com | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain
4.Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windowsvulnerability | 2026-09-09 17:36 | CVE-2026-85046 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence
5.Compromised Flutter package on pub.dev contains XCSSET malwareblog | 2026-09-08 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #macos
6.Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Filesblog | 2026-09-08 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #botnet
7.Shai-Hulud Rises From the Dead after 111 daysblog | 2026-09-07 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
8.Popular code generator for TanStack Query hit by supply chain wormincident | 2026-08-28 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
9.Good riddance, TeamPCP. Now for the hard part.blog | 2026-08-27 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
10.Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaignsincident | 2026-08-20 15:56 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #rust
11.keyv and cacheable npm Package Hijacked in Supply Chain Attackincident | 2026-08-04 11:25 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #malware
12.Keyv and friends compromised in active Shai-Hulud supply chain attackincident | 2026-08-04 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #malware
13.Inside Astaroth's New Spambot Componentresearch | 2026-07-29 00:00 | crowdstrike.com | Original ↗ | .md | #featured | #threat-intelligence | #malware
14.SleeperGem: RubyGems supply chain attack targets dormant maintainer accountsincident | 2026-07-19 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #ruby
15.Anthropic's Fever Dream: Claude's package that stole real keysblog | 2026-07-31 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
16.Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacksresearch | 2026-07-21 00:00 | crowdstrike.com | Original ↗ | .md | #ai-security | #supply-chain | #featured
17.Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragonblog | 2026-07-28 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #mobile-security
18.AsyncAPI npm packages backdoored via GitHub Actionsincident | 2026-07-14 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #featured | #incident-response
19.Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Stagedblog | 2026-07-23 00:00 | hunt.io | Original ↗ | .md | #ai-security | #threat-intelligence | #malware
20.Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetryincident | 2026-07-09 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #web3 | #featured
21.Open Directory Stages NGINX Rift and Ghost CMS Exploits Against Government and Finance Across Eleven Countriesblog | 2026-07-20 00:00 | hunt.io | Original ↗ | .md | #attack-chains | #threat-intelligence | #malware
22.M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actionsincident | 2026-07-14 10:33 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #github-actions
23.Don’t eat the ChocoPoCs! How vulnerability researchers were repeatedly targeted by trojanised exploitsincident | 2026-07-01 11:35 | yeswehack.com | Original ↗ | .md | #supply-chain | #featured | #vulnerability-research
24.How Aikido Intel detects malware and vulnerabilities firstblog | 2026-07-14 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
25.Packagist is now protected by Aikido Intel and other updates to the PHP registryblog | 2026-06-26 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
26.Everybody's shipping code they can't readblog | 2026-06-25 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
27.Inside Eastern Europe's C2 Sprawl: 3,900+ Servers and 302 Providers Mapped (Updated)blog | 2026-06-24 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #threat-hunting
28.Aikido x Drydock | A way for maintainers to catch malware before it shipsblog | 2026-06-23 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
29.Over 140 popular Mastra npm Packages Hit by Supply Chain Attackincident | 2026-06-17 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
30.Multiple JetBrains IDE plugins caught stealing AI keysblog | 2026-06-16 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware