supply chain

A supply chain is the network of organizations, people, activities, information, and resources involved in producing and delivering a product or service from the initial supplier of raw materials to the final customer. It includes all processes related to sourcing, manufacturing, transportation, warehousing, and distribution.
  1. ChainDrop npm worm uses Ethereum routing to spread malware

    ChainDrop npm worm uses Ethereum routing to spread malware

    A supply chain worm targets developer trust Unit 42 says a self-propagating npm worm called ChainDrop infected more than 400 packages and reached software used at very large scale. The reported campaign is significant because it targets the systems developers rely on to build, test and publish...
  2. AI vulnerability discovery finds 14,090 open-source flaws

    AI vulnerability discovery finds 14,090 open-source flaws

    Autonomous AI vulnerability research moves from theory to scale Unit 42 says an autonomous research system called NOVA confirmed 14,090 vulnerabilities across 3,915 open-source projects in two months. The company describes the work as evidence that frontier AI can expand vulnerability discovery...
  3. Supply chain compromise surge hits open source packages

    Supply chain compromise surge hits open source packages

    Open source packages move to the center of supply chain risk Google Threat Intelligence Group and Mandiant say large-scale open source software supply chain compromise expanded sharply across 2025 and early 2026. The report points to package repositories, developer tools and CI/CD workflows as...
  4. Trust Wallet Chrome Extension Compromised in $7M Supply Chain Attack

    Trust Wallet Chrome Extension Compromised in $7M Supply Chain Attack

    Trust Wallet Chrome Extension Compromised in $7 Million Supply Chain Attack Trust Wallet users were hit by a supply chain breach that turned a routine browser update into a direct theft vector. Attackers embedded malicious code into an official Chrome extension release, draining funds from...
Top