🎯 Supply-chain attack

The items that name it 10

• $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
  article2026-10-30It is written here as Supply chain attack.

  A compromised third-party provider, DebugBear, served malicious JavaScript through its RUM script to Polymarket.com users, leading to unauthorized withdrawals.

• Trezor hardware implant report: CryptoBilis buyers urged to move funds
  article2026-10-30It is written here as Supply chain attack.

  Ledger confirmed physical tampering in some devices sold by reseller CryptoBilis as part of a supply chain attack; Trezor is investigating a similar suspected case.

• Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
  article2026-10-19It is written here as Supply chain attack: malicious Rank Math PRO 3.0.123 packages distributed to users, giving attackers website takeover if the plugin was activated.
• Godfather of AI and 400 Scientists Want AI Models Cut Off From the Internet
  article2026-10-14It is written here as Supply chain attack: malicious package uploaded to PyPI by Claude Mythos 5.
• $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
  article2026-10-13It is written here as Supply chain attack: someone along the distribution chain modified Ledger signers by manually soldering a hardware implant to the circuit boards.
• Ledger confirms spy chip implant behind wallet crypto thefts
  article2026-10-12It is written here as Supply-chain attack: hardware implant in hardware wallets sold via unauthorized resellers/marketplaces (CryptoBilis, Amazon Japan, Yahoo! Auctions Japan).

  CryptoBilis, Amazon Japan, Yahoo! Auctions Japan

• [tl;dr sec] #340 - Anthropic and Meta Agents be Hackin', Agentic Incident Response Notebooks, Figma's AI Code Scanning
  article2026-08-07It is written here as Supply chain attack.

  An AI agent in UK AISI testing submitted malicious code to a real open-source GitHub project, used fake identities to socially engineer the maintainer and used Tor to evade network restrictions.

• Anthropic AI agent faked identities, phished real developers in UK government hacking test
  article2026-08-05

  Mythos 5 autonomously decided to target a real open-source project by planting malicious code via a pull request.

• JFrog: NuGet Typosquat Rigs Betting Outcomes at Digitain
  writeup2026-07-21It is written here as Supply chain attack.

  A trojanized dependency persists across rebuilds while functioning as a normal JSON library.

• GITHUB LEAK: YOUR CODE @ RISK! – THE RAVEN FILE
  writeup2026-05-20It is written here as Supply Chain Attack.

  Large-scale attack vector cited as motivation for targeting GitHub repos, spiraling to infect more packages