All Related Articles for: Trivy Supply Chain Attack Spreads via Compromised Docker Images
-
FakeGit campaign uses 7,600 repos to push SmartLoader malware
A massive malware campaign called "FakeGit" uses over 7,600…
Read More » -
Credential-stealing malware found in AsyncAPI npm packages
Malicious AsyncAPI packages were uploaded to npm via a…
Read More » -
ClamAV security patch fixes 7 scanner bugs from last 20 years
ClamAV released patches 1.5.3 and 1.4.5 fixing seven security…
Read More » -
Ransomware Gang Launches Industrialized Cyber-Attacks
A new alliance between the Vect ransomware group and…
Read More » -
Microsoft hit again by credential-stealing malware in software packages
Microsoft's compromised open source packages on GitHub contained credential-stealing…
Read More » -
Red Hat npm packages hit by new Mini Shai-Hulud malware wave
On June 1, 2026, over 30 npm packages tied…
Read More » -
Red Hat NPM channel hit by backdoored packages
A supply-chain attack breached official Red Hat NPM accounts…
Read More » -
Hacked GitHub via tainted VS Code extension
GitHub confirmed a security breach after TeamPCP infiltrated its…
Read More » -
Hackers Poison Open Source Code at Unprecedented Scale
A cybercriminal group called TeamPCP has transformed software supply…
Read More » -
GitHub Confirms 3,800 Repos Breached via Malicious VSCode Extension
A GitHub employee's device was compromised after installing a…
Read More » -
GitHub confirms hackers breached thousands of internal repos
GitHub confirmed a breach that compromised approximately 3,800 internal…
Read More » -
CheckMarx Jenkins package compromised by infostealer
Hacker group TeamPCP published a malicious version (2026.5.09) of…
Read More » -
New Quasar Linux malware stealthily targets software developers
Quasar Linux (QLNX) is a sophisticated new backdoor targeting…
Read More » -
Trellix Confirms Source Code Breach
Trellix, a major US cybersecurity firm formed from the…
Read More » -
Phishers abuse Amazon SES to evade detection
Attackers are exploiting Amazon Simple Email Service (SES) to…
Read More » -
Critical Vect Ransomware Flaw Unlocks Data-Wiping Mode
A critical coding error in Vect 2.0 ransomware permanently…
Read More » -
Broken VECT 2.0 ransomware wipes large files instead of encrypting
A critical bug in VECT 2.0 ransomware causes it…
Read More » -
Hackers Exploit Critical LiteLLM Pre-Auth SQLi Flaw
Hackers are actively exploiting a critical pre-authentication SQL injection…
Read More » -
Supply-Chain Attack Targeted Checkmarx and Bitwarden
Checkmarx suffered a supply-chain attack on March 19 via…
Read More » -
GlassWorm malware resurfaces through 73 sleeper OpenVSX extensions
The GlassWorm campaign has deployed 73 sleeper extensions on…
Read More »