Cyber CrimeNewSupply Chain Breach Hits Jscrambler NPM Package Integrity
Compromised publishing credentials allowed attackers to inject malicious binaries into widely used Jscrambler NPM versions.
> Search
11 results for “supply chain”
Cyber CrimeNew
Cyber CrimeNewU.S. Targets VPN Infrastructure Enabling Global Ransomware Campaigns
Federal authorities have sanctioned a specialized VPN provider and a malware cryptor vendor to disrupt ransomware supply chains.
SecuritySupply Chain Breach Targets Jscrambler Dependency Pipeline
A malicious npm package injection forced a swift cleanup, highlighting the persistent dangers of compromised build environments.
Cyber CrimeLidl Breach Highlights Supply Chain Vulnerability in Retail Sector
A third-party security failure exposed customer data, forcing the retail giant to warn users about the heightened risk of phishing attacks.
SecurityBeyond the Ward: Why Hackers Are Targeting Medical Supply Chains
As frontline clinical defenses strengthen, digital adversaries are pivoting toward vulnerable third-party service providers.
SecurityWhen Build Tools Turn Hostile: Inside the jscrambler Poisoning
A compromised jscrambler package release highlights how modern software pipelines are weaponized to harvest developer secrets.
SecurityWhy the Latest Bootloader Flaws Threaten Enterprise Networks
Newly discovered vulnerabilities in the popular U-Boot bootloader could allow attackers to bypass startup security protections entirely.
SecurityWhen Trust is Weaponized: Inside the Injective Labs SDK Compromise
A compromised developer account on GitHub allowed attackers to inject silent credential-stealing malware into a popular Web3 ecosystem.
SecurityOrchestrating Trust: The Imperative of Speed in Open Source Security
As AI accelerates vulnerability discovery, a surge in 'clearinghouses' highlights a critical shift from mere data sharing to rapid, automated remediation.
Cyber CrimeDeception's New Front: From Global Fraud to Stealthy Software Subversion
Recent reports reveal a vast landscape of cyber threats, from international law enforcement combating social engineering at scale to sophisticated tactics undermining software integrity and user trust.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.