Compromise Software Supply Chain

Named by 4 kept items in this workspace.

2 items name it under classification.key entities and 2 under techniques.

Search every workspace for Compromise Software Supply Chain. It matches the name as written, so it can find other things that share it.

The items that name it 4

Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
writeupas classification.key entities2026-10-30It is written here as T1195.002.
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
writeupas classification.key entities2026-10-30It is written here as T1195.002.
Socket: Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan
writeupas techniques2026-09-20
Malicious code injected into published npm beta releases of @joyfill/layouts and @joyfill/components.
Socket: Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor
writeupas techniques2026-05-20
Typosquat of github.com/shopspring/decimal published as github.com/shopsprint/decimal, weaponized after years of benign presence (trust-then-poison pattern)

All techniques in this workspace.