1.Graphalgo campaign spreads to Terraform providers and Go Modulesresearch | 2026-09-22 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #web3 | #go
2.The Perfect Heist: NuGet Typosquat Targets Betting Platform to Rig Resultsresearch | 2026-07-21 13:16 | jfrog.com | Original ↗ | .md | #supply-chain | #typosquatting | #dotnet
3.Shai-Hulud copycat campaign targets Python developers through PyPI typosquattingblog | 2026-06-09 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #malware | #credential-theft
4.What is Slopsquatting? The AI Package Hallucination Attack Already Happeningblog | 2026-02-20 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #npm | #llm
5.Fake Homebrew Pages Deliver Cuckoo Stealer via ClickFix | macOS Threat Hunting Analysisresearch | 2026-02-17 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #malware | #threat-hunting
6.Top Software Supply Chain Security Vulnerabilities Explainedblog | 2025-10-22 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #open-source | #npm
7.Supply chain attacks are exploiting our assumptionsincident | 2025-09-24 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #supply-chain-security
8.3 Software Supply Chain Risks in 2023blog | 2023-07-12 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #npm | #pypi
9.Think Outside the Prompt: Creative Approaches to Attacking AIblog | 2023-06-08 00:00 | netspi.com | Original ↗ | .md | #ai-security | #supply-chain | #machine-learning