Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
7 results for “supply chain attack”
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
A supply chain attack compromised BdThemes' WordPress plugins by injecting malicious JSON payloads that created unauthorized administrator accounts, without altering source code in the official WordPress.org repository.
Aug 11, 2026
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
A supply chain attack compromised QuickFox's Windows installer to deliver the FDMTP backdoor, targeting overseas Chinese users since at least August 2025.
Aug 5, 2026
Keyv and friends compromised in active Shai-Hulud supply chain attack
A forum post on Hacker News reports unverified claims of a supply chain compromise involving Keyv and other projects under the 'Shai-Hulud' attack name, with no substantive details provided.
Aug 4, 2026
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
Amazon attributed recent npm supply-chain attacks involving malicious packages 'Debug' and 'Chalk' to North Korean state-sponsored actors, positioning itself as a key threat intelligence contributor in open-source security.
Jul 31, 2026
When AppSec Scanners Become a Supply Chain Attack Vector
Security scanners integrated into software development pipelines can themselves be compromised to enable supply chain attacks, turning defensive tools into offensive vectors.
Jul 29, 2026
GitHub, PyPI add time-absed defenses against supply chain attacks
GitHub and PyPI implemented time-based defenses in Dependabot to mitigate supply-chain attacks by limiting the window for malicious package substitution.
Jul 26, 2026
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
A software supply chain attack named SleeperGem deployed three malicious RubyGems packages to compromise developer machines and deliver secondary payloads.
Jul 20, 2026