supply-chain
15 live · 57 on record · last incident 1 day ago
Live15
- liveHijacking a Trusted LLM in Quantized Deployments via Disguised Adapters
Research · since 13 Nov 2026
Researchers demonstrated that third-party LoRA adapters can pass audits on unquantized base models while successfully hijacking decisions after quantization. The attack requires no modifications to the trusted base model.
AI - liveTrained to betray: How post-training supply chain attacks hijack coding agents
Research · since 12 Nov 2026
Researchers demonstrated that poisoned datasets and checkpoints can compromise AI coding agents and trigger remote code execution. No real-world exploitation is reported.
AI - liveCairn Attackers breached 10 organizations using the open‑source AI pentest framework Cairn
Breaches & attacks · Real loss · since Aug 2026 (approx.)
Attackers used the open‑source AI pentest framework Cairn to breach ten organizations, gaining unauthorized access and exfiltrating data. The campaign spanned August and September 2026 and targeted semiconductor, advanced‑manufacturing, and defense sectors.
Do:Investigate the breach, reset compromised accounts, and strengthen monitoring for AI‑driven intrusion attempts.
AI - liveGitHub Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories
Supply chain · Exploited · No fix needed · since 10 Nov 2026
An attacker compromised 4,837 GitHub accounts and injected a secret‑stealing tool into the CI pipelines of at least 1,806 repositories. The tool harvested cloud credentials and other secrets accessible to the compromised CI workflows.
Do:Revoke compromised credentials, rotate all secrets, and audit CI workflows for malicious code
- liveLLM Agent StealthyPoison: Manipulating LLM Agent Behavior through Procedural Poisoning of Third-Party Skills
Research · since 10 Nov 2026
Researchers presented StealthyPoison, a procedural poisoning technique that corrupts decision-critical rules in third-party skills. The attack induces incorrect task outcomes while preserving advertised functionality and normal execution behavior.
AI - liveFireworks AI Fireworks AI discloses breach following cloud provider compromise
Breaches & attacks · Exploited · since 10 Nov 2026 · updated 12 Nov 2026
AI startup Fireworks AI disclosed a security breach where attackers accessed its development machines. The intrusion stemmed from a previous compromise at a third-party cloud provider.
AI - livebee-js Hackers Compromise Ethersphere's bee-js and Swarm Desktop with Malware
Supply chain · Real loss · No fix needed · since 9 Nov 2026
Attackers compromised Ethersphere's release automation to publish malicious versions of bee-js and Swarm Desktop. The packages steal wallet keys, stored passwords, and install a backdoor.
Do:Downgrade or remove affected versions of bee-js and Swarm Desktop immediately and check for compromised wallet keys.
- liveCrédit Mutuel Arkéa banking systems French bank Crédit Mutuel Arkéa confirms cyber heist resulting in massive theft
Breaches & attacks · Real loss · since 4 Nov 2026 · updated 9 Nov 2026
Crédit Mutuel Arkéa reported a cyber heist resulting in an estimated $133 million stolen via unauthorized transfers. Attackers used internal bank accounts after compromising an unnamed supplier.
Do:Audit supplier access controls and monitor high-value transfer mechanisms.
- livecPGuard cPGuard update channel hijacked to deploy backdoors and steal password hashes
Supply chain · Real loss · Patched · since 2 Nov 2026 · updated 4 Nov 2026
Attackers breached the update system of the cPGuard security tool on November 2 to distribute a malicious script to customer Linux servers. The script deployed a backdoor and exfiltrated sensitive files including password hashes.
Do:Update cPGuard to version 5.88.25 or later and inspect servers for compromise.
- liveLLM Agent Frameworks Beyond Prompt Injection: The Tool Update Gap in LLM Agent Security
Research · since 3 Nov 2026
Researchers identified a supply-chain vulnerability in agentic systems where updated external tools can introduce malicious functionality without re-verification. The issue bypasses context-window defenses because tool updates execute outside the model's direct visibility.
AI - liveMCP servers & tools AI coding agents install unpatched archived MCP servers
Research · since 3 Nov 2026
Research shows AI coding agents select deprecated and unpatched Model Context Protocol servers from archived repositories during user sessions. This creates ongoing supply chain exposure on developer machines.
AI - liveTrezor Safe 5 Trezor warns of suspected hardware crypto-theft implant
Supply chain · Exploited · Patched · since 30 Oct 2026 · updated 13 Nov 2026
Hardware wallet maker Trezor received reports regarding a suspected physical crypto-theft implant found in a device sold by a regional reseller. Users are urged to inspect devices and source hardware directly.
Do:Inspect hardware wallets purchased from third-party resellers for unauthorized extra circuit boards.
- liveClaude Code extension Claude Code extension poisoned with persistent SSH backdoor
Supply chain · Exploited · No patch yet · since 30 Oct 2026 · updated 2 Nov 2026
A tampered build of Anthropic’s Claude Code extension planted an SSH backdoor on developers’ machines via the Open VSX marketplace. Researchers discovered the malicious version 2.1.313 distributing unauthorized access.
Do:Remove the malicious Claude Code extension version and check systems for unauthorized SSH keys.
AI - livePolymarket Polymarket halts trading after script breach and $2.5M loss
Breaches & attacks · Real loss · since 29 Oct 2026 · updated 2 Nov 2026
Polymarket suspended trading after attackers compromised a third-party service to inject cryptocurrency-draining scripts. Approximately $2.5 million in assets was traced to attacker wallets.
- liveMicrosoft 365 Storm-0940 Uses ARTEX Agentic AI in ConnectWise Supply Chain Campaign
Breaches & attacks · Exploited · since 21 Oct 2026 · updated 2 Nov 2026
The Storm-0940 threat group utilized ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, leading to credential abuse across Microsoft 365 environments. The operation demonstrates nation-state threat actors leveraging AI to scale intrusion activities.
AI
Earlier42
- closedHugging Face libraries Hugging Face malware campaign returns to hijack GPUs
Supply chain · Exploited · No fix needed · since 29 Oct 2026
AI - closedConvertr analytics script Hackers hijack Convertr analytics script for payment card skimming
Supply chain · Exploited · No fix needed · since 27 Oct 2026
- closedKeystone hardware wallets Keystone to Destroy Hardware Wallets After Device Verification Key Theft
Breaches & attacks · Exploited · since 26 Oct 2026
- closedSteering Vectors Steering for Safety, Hijacking for Profit: Trojan Threats in LLM Steering
Research · since 27 Oct 2026
AI - closedPython NameTrap: Steering AI Coding Agents via Variable Names
Research · since 27 Oct 2026
AI - closedOnline store platforms Malware Campaign Infects 953 Online Stores
Breaches & attacks · Exploited · since 26 Oct 2026
- closedGitHub Actions Gheist Campaign Uses Stolen GitHub Tokens to Exfiltrate Private Repository Secrets
Breaches & attacks · Exploited · since 26 Oct 2026 · updated 28 Oct 2026
- closedAI coding agents AI coding agents hijacked using malicious AGENTS.md instruction file
Research · since 25 Oct 2026 · updated 26 Oct 2026
AI - closedLiteLLM LiteLLM Master Key Leak Leads to Malicious Package Release
Supply chain · Exploited · since 24 Oct 2026 · updated 26 Oct 2026
AI - closedLiteLLM LiteLLM 1.107.0 compromised via malicious Python startup hooks
Supply chain · Exploited · since 23 Oct 2026
AI - closedLiteLLM LiteLLM release pipeline compromised to distribute info-stealer malware
Supply chain · Exploited · since 22 Oct 2026
AI - closedLiteLLM LiteLLM Package Compromised in Supply Chain Incident via Release Pipeline
Supply chain · Exploited · since 21 Oct 2026
AI - closedLiteLLM LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer
Supply chain · Exploited · since 21 Oct 2026 · updated 27 Oct 2026
AI - closedRAGLeak RAGLeak: Supply-Chain Privacy Backdoors in Retrieval-Augmented Generation
Research · since 20 Oct 2026
AI - closedClaude Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware
Breaches & attacks · Exploited · since 19 Oct 2026
AI - closedopen-weight LLM Model-as-a-Trojan: Self-Activating Covert DNS Exfiltration in LLM Weights
Research · since 19 Oct 2026
AI - closedARTEX Storm-0940 Uses ARTEX AI Agents in ConnectWise Supply Chain Attack
Breaches & attacks · Exploited · since 22 Oct 2026 · updated 26 Oct 2026
AI - closed7.8Hugging Face libraries Hugging Face Transformers Downloads Custom Code Before Consent
Supply chain · Disclosed · since 1 Sep 2026 · CVE-2026-80047
AI - closedGGUF Poisoned GGUF Templates Enable Inference-Time Supply Chain Attacks
Research · since Jun 2025 (approx.)
AI - closedHugging Face libraries Model Namespace Reuse AI Supply Chain Attack
Research · since 3 Sep 2025
AI - closedClaude Mythos 5 AI Coding Model Published Malicious PyPI Package Compromising Real Systems
Breaches & attacks · Exploited · since 30 Jul 2026
AI - closed8.8vLLM CVE-2026-54232: Dependency confusion flaw in vLLM Dockerfile
Patch now · Disclosed · since 22 Jun 2026 · CVE-2026-54232
AI - closed8.8vLLM vLLM Hardcoded Trust Remote Code Parameter Leads to RCE
Patch now · Disclosed · since 28 May 2026 · CVE-2026-4944
AI - closed8.8vLLM CVE-2026-5817: Docker Model Runner vllm-metal arbitrary code execution vulnerability
Patch now · Disclosed · since 22 May 2026 · CVE-2026-5817
AI - closedMCP servers & tools Postmark MCP Server Package Hijacked for Email Exfiltration
Supply chain · Exploited · since Sep 2025 (approx.)
AI - closedLiteLLM LiteLLM Releases Contain Credential Harvesting Malware
Supply chain · Exploited · since 25 Mar 2026
AI - closedCline Actor Exploited Cline AI Workflow and Published Unauthorized CLI Package
Patch now · Exploited · since 17 Feb 2026
AI - closedClawdBot Poisoned ClawdBot Skill Distributed on Registry
Research · since 26 Jan 2026
AI - closedOpenClaw Malicious OpenClaw Skills Distribute AMOS Stealer via ClawHub
Supply chain · Exploited · since 1 Feb 2026
AI - closedAmazon Q Developer Malicious Commit Deploys Destructive AI Agent in Amazon Q Extension
Supply chain · Exploited · since 13 Jul 2025
AI - closedCursor Rules File Backdoor: Supply Chain Attack on AI Coding Assistants
Research · since 18 Mar 2025
AI - closedClaude Code + SDKs Malicious Nx npm Packages Weaponize AI Coding Agents for Exfiltration
Breaches & attacks · Exploited · since 21 Aug 2025
AI - closedAmazon Q Malicious Wiping Command Found in Amazon Q AI Assistant Release
Supply chain · Exploited · since 17 Jul 2025
AI - closedHugging Face libraries Malicious Models with Embedded Malware Discovered on Hugging Face
Supply chain · Exploited · since 2025 (approx.)
AI - closedHugging Face libraries Organization Impersonation and Model Poisoning on Hugging Face
Research · since 23 Aug 2023
AI - closedAI Model Tampering Risk via Exposed Container Registries
Research · since 26 Sep 2023
AI - closedChatGPT ChatGPT Package Hallucination Supply Chain Risk
Research · since Jun 2024 (approx.)
AI - closed8.4LoLLMs CVE-2024-4897: RCE vulnerability in lollms-webui via insecure dependency
Patch now · Disclosed · since 2 Jul 2024 · CVE-2024-4897
AI - closedHugging Face libraries AI Hallucinations Exploited for Supply Chain Attacks via Slopsquatting
Breaches & attacks · Exploited · since 1 Dec 2023
AI - closedHugging Face libraries PoisonGPT Open Source Model Supply Chain Demonstration
Research · since Jul 2023 (approx.)
AI - closedPyTorch-nightly PyTorch-Nightly PyPI Package Compromised with Malicious Dependency
Supply chain · Exploited · since 25 Dec 2022
AI - closedPyTorch-nightly PyTorch-nightly Compromised via Dependency Confusion on PyPI
Supply chain · Exploited · since 3 Feb 2022
AI