Supply Chain

9 Articles

How Google Broke TeamPCP From the Inside

Google's Mandiant ran an undercover analyst inside TeamPCP, revoked stolen credentials at AWS and Microsoft, and tipped the FBI.

Security —— Aug 4, 2026 5 min read

A self-propagating worm tore through the npm registry on Tuesday morning, trojanizing the widely used keyv…

Security —— Jun 2, 2026 3 min read

Attackers compromised the official Redhat cloud services npm namespace on June 1, 2026, injecting a sophisticated…

Security —— May 24, 2026 3 min read

Security researchers at Socket have uncovered an active supply chain attack that poisoned 34 packages and…

Data Breached —— May 20, 2026 3 min read

The world’s largest code-hosting platform just became the victim of its own ecosystem. On May 20,…

Microsoft —— May 19, 2026 4 min read

TeamPCP has quietly poisoned yet another trusted developer package — and this time the target was…

Security —— May 12, 2026 3 min read

A self-propagating worm has torn through the TanStack JavaScript ecosystem, publishing 84 malicious versions across 42…

Malware —— May 8, 2026 3 min read

JDownloader, one of the most widely used free download managers with millions of users across Windows,…

Security —— Apr 30, 2026 3 min read

If you’re building, training, or shipping AI models with PyTorch Lightning, check your installed version immediately…