📦 Supply Chain569

List Grid

What you seeeverything

Recent Oldest Added A–Z

All types569 Articles255 Write-ups182 Repos37 Threads26 Talks23

More types5

Papers20 Advisories18 Tools5 Other2 Videos1

📦 Supply Chain

bleepingcomputer.comarticle

Alpine Linux rebuilds GitLab after attempted RCE attack

Alpine Linux rebuilt its GitLab server and reset all passwords after attackers tried to exploit CVE-2026-97229, a maximum-severity integer overflow in the Onigmo regex engine bundled with Ruby, on October 20-21. Eight worker crashes occurred and four were partially successful. Missing logs and outbound connection records meant compromise could not be ruled out. Alpine had run GitLab 19.3.4, then 19.3.6, which lacked the Ruby patch; the fixed image is alpinelinux/gitlab:19.3.6 with Ruby 3.3.13.

GitLabAlpine LinuxDocker+1

CVE-2026-97229integer overflowOnigmo

Supply Chain, Blue Team & Detection, DevSecOps· Published and added 1 Nov 2026

microsoft.comwriteup

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft Threat Intelligence analyzes a tampered anthropic.claude-code extension (versions 2.1.312 and 2.1.313) served on the Cursor marketplace on 29 October 2026. The injected JavaScript loader adds an SSH key labeled svc-telemetry, opens a reverse SSH tunnel and sets up persistence on macOS, Linux and Windows. The post gives cleanup steps, IOCs and Defender XDR hunting queries. VS Code Marketplace and npm were not affected.

CursorClaude CodeSSH+3

Protocol Tunneling (T1572)reverse SSH tunnelMicrosoft Threat Intelligence+2

Supply Chain, Blue Team & Detection, Malware & RE· Published and added 31 Oct 2026

stepsecurity.ioarticle

Binance’s $6.3 Billion Hack Puts Developer Machine Security in Focus

StepSecurity's analysis of Binance's 29 October 2026 incident, which Binance puts at about $6.3 billion in affected assets. It covers Binance's disclosure of a possible DevOps laptop compromise, and TRM Labs and Elliptic findings on 50 EIP-7702 authorizations and a persistent delegation. It links this to the Nx, OVHcloud CLI and Claude Code extension compromises, gives an investigation checklist, then describes StepSecurity products.

EthereumnpmVS Code+3

BinanceTRM LabsElliptic+5

Blockchain, Supply Chain· Published and added 30 Oct 2026

bankless.comarticle

Polymarket Sends $3.9M Back to Traders After Vendor Script Drain

Polymarket's international site was hit on 29 October 2026 when a page-speed monitoring script served from DebugBear's CDN was replaced with a drainer. It hijacked logged-in sessions for about an hour and took $2.7M from 726 wallets via Polymarket's relayer. Scott Helme of Report URI says the CSP allowlisted every domain used and that hash pinning would have blocked the swapped file. Polymarket is repaying $3.9M, and this is its second vendor-script compromise since June.

Polymarket

DebugBearReport URIBitquery+1

Supply Chain, AppSec· Published and added 30 Oct 2026

bleepingcomputer.comarticle

Trezor warns of suspected crypto-theft implant in hardware wallet

Trezor warns of a suspected crypto-theft implant in a Trezor Safe 5 sold by reseller CryptoBilis in Southeast Asia. An Indonesian buyer found an extra board with a cellular module and antenna between the main board and screen, apparently able to read the recovery phrase and send it over mobile networks. Trezor has not examined the device, advises moving funds to a new wallet for any CryptoBilis purchase since March 2026, and notes a similar Ledger implant was confirmed.

TrezorLedger

CryptoBilisTokopediarecovery phrase

Blockchain, Hardware & RF, Supply Chain· Published and added 30 Oct 2026

bleepingcomputer.comarticle

Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version 2.1.313 of Anthropic's Claude Code extension was served from Cursor's marketplace for about 11 hours on 29 October 2026, reaching up to 5,000 developers. A JavaScript loader prepended to extension.js added an attacker SSH key, a reverse tunnel and macOS/Windows persistence, and reported to 134.209.82[.]225. Coding errors likely blocked SSH access on many hosts. Cursor removed it and rotated keys; victims should look for an 'svc-telemetry' SSH key.

Claude CodeCursorVS Code+3

PhorionOpenSourceMalwareLaunchAgent persistence+1

Supply Chain, AI Security, Threat Intel· Published and added 30 Oct 2026

aikido.devarticle

Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach

Aikido Security's analysis of the roughly $6.3 billion Binance incident, which Binance says may have started with a compromised DevOps engineer's laptop. It sets out what is known (no private key leak, TraderTraitor attribution by TRM Labs and Chainalysis, additional breach points) and a plausible chain from laptop credentials to a withdrawal service. It compares the 2025 Bybit theft and lists mitigations.

npmVS CodeAWS+1

BinanceTraderTraitorLazarus Group+9

Blockchain, Threat Intel, Supply Chain· Published and added 30 Oct 2026

cyberplace.socialthread

Backdoors in official Claude Code extensions

GossiTheDog's Mastodon post reports that the Anthropic Claude Code Visual Studio extension, as installed in Cursor, contains malware that creates a remote access Trojan on desktops. It links to a phorion.io blog post on the reported compromise of the official Claude Code VSX extension. The post gives no technical detail, indicators or dates itself.

Claude CodeCursorOpen VSX+1

Anthropicremote access Trojan

Supply Chain, Threat Intel· Added 31 Oct 2026, published 30 Oct 2026

x.comthread

Shubham Mishra 🐐 (@shubh6200) on X

A post relaying Cursor's security advisory: a modified, malicious Claude Code VS Code extension was distributed through the Cursor extension marketplace, affecting at most 5,000 users. Anthropic did not develop that version, and other extensions are not affected. Users of Claude Code in Cursor are told to update to version 2.1.314. The post adds that marketplaces need publisher verification and package integrity checks. It gives no technical detail on the payload.

Claude CodeCursorVS Code

Anthropic

Supply Chain, AI Security· Added 31 Oct 2026, published 30 Oct 2026

decrypt.coarticle

Trezor Warns CryptoBilis Buyers After Report of Hardware Implant in Safe 5

Trezor warned buyers of its wallets from reseller CryptoBilis (March 2026 onward) to move funds, after an Indonesian customer reported a hardware implant in a Safe 5 bought in August 2026. The report describes a board with a cellular module between mainboard and screen that reads the wallet backup and sends it over a mobile network. Trezor has not yet examined the device. It found no tampering in four other CryptoBilis units.

Trezor Safe 5LedgerBitcoin

CryptoBilisTrezorLedger Donjon+3

Hardware & RF, Supply Chain, Blockchain· Published and added 30 Oct 2026

opensourcemalware.comwriteup

Trojanized Claude Code Extension Plants an SSH Backdoor

Analysis of a trojanized anthropic.claude-code 2.1.313 extension (darwin-arm64), found on Open VSX, with a 66-line loader prepended to extension.js. It adds an svc-telemetry key to authorized_keys, opens a reverse SSH tunnel to 134.209.82.225, sets persistence (LaunchAgent, cron, scheduled task) and sends host recon over HTTP port 8099. Includes IOCs, hashes and response steps; no further payload download was found.

Claude CodeVS CodeOpen VSX+3

anthropic.claude-code 2.1.313134.209.82.225svc-telemetry+3

Supply Chain, Malware & RE, AI Security· Published and added 30 Oct 2026

securityweek.comarticle

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

Polymarket halted trading on 29 October after users reported unauthorized withdrawals traced to malicious JavaScript served from DebugBear's real user monitoring snippet. Hudson Rock's sample abused the authenticated session to sell positions or send tokens to a hard-coded address, without exfiltrating credentials. Loss estimates range from $2.19 million to $2.71 million (GoPlus), and Polymarket pledged reimbursement.

PolymarketDebugBearJavaScript

Hudson RockGoPlusArkham+2

Supply Chain, Threat Intel· Published and added 30 Oct 2026

stepsecurity.iowriteup

Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines

The Claude Code VS Code extension anthropic.claude-code 2.1.313 was published on Open VSX on 29 October 2026 with a malicious loader prepended to extension.js. On load it planted an attacker SSH key (svc-telemetry), installed per-OS persistence, opened a reverse SSH tunnel and beaconed host recon over HTTP. Cursor reports at most 5,000 users received it in an 11-hour window. The post gives the timeline, cleanup artifacts and credential rotation steps.

Claude CodeVS CodeOpen VSX+3

anthropic.claude-code 2.1.313svc-telemetryT1195.002+1

Supply Chain, Blue Team & Detection, Threat Intel· Published and added 30 Oct 2026

socket.devarticle

Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace

Socket's analysis of the reported malicious Claude Code extension 2.1.313, which Cursor confirmed was served from its own marketplace on 29 October 2026 to up to 5,000 users. Open VSX's change feed (3,392 events) and npm metadata hold no publication or removal record for that version, contradicting the initial OpenSourceMalware claim. Cursor published hashes, IOCs and remediation scripts.

Claude CodeCursorOpen VSX+3

OpenSourceMalwareSocketPaul McCarty+1

Supply Chain, Threat Intel· Published and added 30 Oct 2026

theblock.coarticle

Trezor reports suspected hardware implant in Safe 5 sold by CryptoBilis

Trezor reported a suspected hardware implant in a Safe 5 bought in August 2026 from reseller CryptoBilis via Tokopedia. The alleged implant is a board with a cellular module that reads the screen, including recovery phrases. Trezor has not examined the device and found no tampering in four other units, and it told buyers who purchased from the reseller since March 2026 to move funds.

Trezor Safe 5

CryptoBilisTokopediaTrezor

Hardware & RF, Blockchain, Supply Chain· Published and added 30 Oct 2026

en.cryptonomist.charticle

Trezor hardware implant report: CryptoBilis buyers urged to move funds

Trezor advised everyone who bought wallets from reseller CryptoBilis since March 2026 to move funds to a new wallet with a new recovery phrase. An Indonesian customer reported a Safe 5 bought via Tokopedia in August 2026 with an extra board holding a cellular module that allegedly sends the wallet backup out. Trezor has not yet examined the device. Ledger separately confirmed tampering on CryptoBilis devices in October 2026.

TrezorLedger

CryptoBilisTokopediaSEAL 911+1

Hardware & RF, Supply Chain, Blockchain· Published and added 30 Oct 2026

phorion.iowriteup

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

Phorion analyzes a backdoor injected into versions 2.1.312 and 2.1.313 of the official Claude Code for VS Code extension on the Cursor Marketplace. An IIFE prepended to extension.js plants an SSH key, opens a reverse SSH tunnel to 134.209.82[.]225, persists via a fake com.apple.sysmond LaunchAgent and beacons host recon. A macOS systemsetup check bug usually stops SSH from being enabled. The post lists detections and remediation.

Claude CodeCursorVS Code+3

Phorionsvc-telemetrycom.apple.sysmond+1

Supply Chain, Malware & RE, Blue Team & Detection· Added 31 Oct 2026, published 30 Oct 2026

opensourcemalware.comwriteup

Earliest Known PolinRider Malware Found in 2025 npm Packages

OpenSourceMalware traces nine itsa-* npm package versions published on 4 May 2025 from a hijacked maintainer account to the PolinRider campaign, eight months before documented victims. It decodes the EtherHiding chain (BNB Smart Chain and Ethereum calldata, JADESNOW, INVISIBLEFERRET bootstrapper, Socket.IO RAT, Python stealer) and links the 2025 sample to 2026 force-push infections. It lists IOCs, hashes, a timeline and hunting guidance.

npmNode.jsPython+3

PolinRiderEtherHidingJADESNOW+9

Supply Chain, Malware & RE, Threat Intel· Published and added 30 Oct 2026

en.cryptonomist.charticle

Polymarket stolen funds: One account withdrew at least $2.7M across 710 wallets

Polymarket's international exchange suffered unauthorized withdrawals on 29 October 2026 after a compromised third-party provider, reportedly the website monitoring service DebugBear. Betting Intelligence and Polysights found one account withdrew at least $2.7 million across 710 wallets. Polymarket paused trading, referred the case to law enforcement, promised reimbursement, and had a June 2026 vendor breach that cost about $3 million. The attack mechanism is not described.

Polygon

PolymarketDebugBearBetting Intelligence+2

Supply Chain, Threat Intel· Published and added 29 Oct 2026

bleepingcomputer.comarticle

Hugging Face malware campaign returns to hijack GPUs for crypto mining

A campaign of 31 malicious Hugging Face repositories across seven accounts, found by Pluto Security, posed as small Qwen2 checkpoints and used trust_remote_code to run a cryptominer and reverse shell on GPU inference hosts. The top model reached 28,412 downloads and scanned clean, and a second wave returned within days of takedown. The article also covers a fake Solana starter kit on GitHub that installs NetSupport Manager via a PowerShell one-liner aimed at AI coding agents.

Hugging FaceQwenXinference+3

Pluto SecurityAir Securitytrust_remote_code+9

Supply Chain, AI Security, Threat Intel· Added 30 Oct 2026, published 29 Oct 2026

bleepingcomputer.comarticle

Polymarket halts trading after crypto-draining script breach, $2.5M traced

Polymarket suspended trading for about an hour on 29 October 2026 after attacker-controlled JavaScript was served through DebugBear's Real User Monitoring script (cdn.debugbear[.]com/C7xcKKrjUnXK.js). The script hijacked logged-in trading sessions, sold positions and moved assets to an attacker wallet, with about $2.5M traced. The article gives the wallet address, the data.debugbear.com C2 endpoint and Hudson Rock's findings.

PolymarketDebugBearJavaScript+1

Hudson Rock0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18cdn.debugbear.com/C7xcKKrjUnXK.js+3

Supply Chain, Threat Intel· Added 30 Oct 2026, published 29 Oct 2026

oversecured.comwriteup

Introducing MavenGate: a supply chain attack method for Java and Android applications | Oversecured Blog

MavenGate is Oversecured's research on hijacking Maven dependencies by buying expired domains behind groupIds on Maven Central and JitPack. It found 6,170 of 33,938 checked domains (18.18%) vulnerable, and tested the attack with its own com.oversecured:hello-world library. It lists defenses (Gradle verification-metadata.xml, PGP signatures) and proposes changes to repository signing.

MavenGradleMaven Central+3

MavenGateOversecuredSonatype+2

Supply Chain, Mobile Security, AppSec· Added 29 Oct 2026

oversecured.comarticle

SDK security in mobile apps: the attack surface your team didn

Oversecured guide to SDK security in mobile apps, built around Microsoft's April 2026 disclosure of an intent redirection flaw in EngageLab's EngageSDK (50 million installs, fixed in 5.2.1). It covers SDK attack surfaces (exported components, WebViews, deep links, hardcoded secrets, payment crypto), a canhub image cropper file-overwrite example, why source-only SAST misses SDK code, and MASVS and PCI DSS expectations.

AndroidEngageSDKOversecured+3

intent redirectionEngageSDK intent redirectionMTCommonActivity+11

Mobile Security, Supply Chain, AppSec· Added 29 Oct 2026

decrypt.coarticle

Polymarket Pauses Trading as Prediction Market Investigates Security Incident

Polymarket put its exchange in cancel-only mode and paused relayer actions on 29 October 2026 after users reported funds withdrawn without permission. Hudson Rock says a DebugBear-hosted script holds wallet-draining code that sells a logged-in user's positions and hard-codes the suspected attacker's wallet (about $2.65 million in POL, per Arkham) as fallback recipient. Polymarket blames a compromised third-party provider and promises to make users whole. Root cause and victim count are unconfirmed.

DebugBearPolygonRelay

PolymarketHudson RockArkham+2

Supply Chain, Threat Intel· Published and added 29 Oct 2026

opensourcemalware.comtalk

The OpenSourceMalware Show #27

The OpenSourceMalware Show #27 (28 October 2026) is a podcast episode with transcript. It covers the Brotli decoder bug (CVE-2026-111497) vendored in C code across Python, Rust and PHP, and how to find copies via decode.c. It also covers the LiteLLM v1.107.0 compromise from an unrevoked admin key and a relaxed release control, and the MALFEX npm campaign hiding payloads in PNG-header files, plus an AGENTS.md lure and DPRK fake fonts in TTF/OTF.

BrotliLiteLLMnpm+3

CVE-2026-111497Node2ShellPHP2Shell+10

Supply Chain, Threat Intel, DevSecOps· Published and added 29 Oct 2026

endorlabs.comarticle

What is an AIBOM? AI bill of materials explained for security teams | Endor Labs

AIBOM explainer from Endor Labs: an AI bill of materials is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with origin, license and integrity evidence. It walks through a CycloneDX entry for a fine-tuned model, compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM Generator and the May 2026 CISA/G7 minimum-elements guidance, and lists a six-step build process. It also states what an AIBOM cannot show: model safety, runtime behavior and coding-agent actions.

CycloneDXSPDXSBOM+2

EU AI ActISO/IEC 42001CISA+5

Supply Chain, AI Security, GRC· Published and added 29 Oct 2026

socket.devwriteup

Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users

Searchjacked is Socket's research on 319 browser extensions (about 13.44M users over a decade) that hijack searches to earn ad revenue. The fetched text attributes 200 extensions to named operators such as Intango, System1, Perion, Mutual Media and Kinner Lake, and 119 to unknown operators like "SecuryBrowse" and "Bing-Search". It lists the Yahoo and Bing monetization IDs used to link them. The narrative and technical mechanics are not in the fetched text.

Chrome Web StoreChrome

SearchjackedIntangoLumio+20

Threat Intel, Supply Chain· Published and added 29 Oct 2026

alpinelinux.orgwriteup

GitLab Security Incident: Attempted Exploitation of CVE-2026-97229

Alpine Linux incident report on attempted exploitation of CVE-2026-97229 (CVSS 10.0), a regex-evaluation bug in Ruby's Onigmo engine reachable through GitLab CI configuration. An attacker crashed workers 8 times on 20 and 21 October 2026. Upgrading to GitLab 19.3.6 did not fix it because the patch sits in GitLab's bundled Ruby. Alpine rebuilt the instance and found no tampering with aports or releases.

GitLabRubyDocker+1

CVE-2026-97229Onigmoaports

Blue Team & Detection, Supply Chain, AppSec· Added 29 Oct 2026, published 28 Oct 2026

x.comthread

Trail of Bits (@trailofbits) on X

Trail of Bits post says it achieved remote code execution through a Brotli decoder bug in Linux lab setups: Node.js 24.22.0 with Express 5.3.0 via the standard JSON parser (x86-64 and ARM64), and Electron 41.10.7 (x86-64) with a custom decoding service. Exploitation needs a carefully matched setup and repeated attempts. A scanner by ToBScottA finds hidden copies of the decoder, including in stripped binaries.

BrotliNode.jsExpress+1

Trail of BitsToBScottA

AppSec, Offensive Security, Supply Chain· Added 30 Oct 2026, published 28 Oct 2026

endorlabs.comarticle

ADLC compliance: Mapping agentic development to NIST SSDF, OWASP, and the EU AI Act | Endor Labs

ADLC compliance guide from Endor Labs that maps agentic development to NIST SSDF (SP 800-218 v1.1), the OWASP LLM Top 10 2025 and Agentic Top 10, and the EU AI Act as amended by Regulation (EU) 2026/1744. It splits controls into a code surface and an action surface (shell, file access, MCP calls, package installs). It gives a four-step AI Act scoping path, the new Annex III date of 2 December 2027, and evidence guidance. It states the crosswalk is the vendor's interpretation, not legal advice.

Endor LabsModel Context ProtocolClaude Code+3

NIST SSDFNIST SP 800-218NIST SP 800-218A+13

GRC, AI Security, Supply Chain· Published and added 28 Oct 2026

Showing 30 of 569