supply chain security9 articles
ShareFile Shutdown Orders, Citrix Bleed 2 Ransomware, and AI Coding Assistants You Can't Trust
This weekly cybersecurity recap highlights a recurring theme: attackers are exploiting the same ordinary vulnerabilities faster than defenders can patch them, using the same AI-powered tools now available to security teams. Key incidents include Progress urging ShareFile customers to shut down Storage Zone Controllers due to an unspecified external threat, active exploitation of Citrix Bleed 2 to deploy DragonForce ransomware, a compromised Jscrambler npm package stealing developer credentials, and a new attack technique called HalluSquatting that tricks AI coding assistants into installing malicious code. The recap also covers a broad range of trending CVEs, new malware families, and emerging threat groups, underscoring that the gap between patch availability and active exploitation continues to narrow.
Stadler Rail Tells Ransomware Gang to Take a Hike on a CHF 10 Million Demand
Swiss rail manufacturer Stadler Rail refused a CHF 10 million ransom demand from the Everest ransomware gang after attackers accessed technical data from a supplier via a shared data exchange platform using compromised credentials. The company stated that no personal or security-relevant data was affected and that its own IT systems remained fully intact. Unusually, Stadler has not appeared on Everest's data leak site despite refusing to pay, which departs from the typical ransomware extortion playbook.
7,600 Fake GitHub Repos Are Hunting Developers and AI Agents Alike
A cybersecurity campaign called **FakeGit** has created nearly 7,600 malicious GitHub repositories — over 800 of which impersonate AI tools or Model Context Protocol (MCP) servers — to distribute **SmartLoader malware**, which then deploys the **StealC** information stealer on victims' systems. The campaign uses copied projects, fake developer profiles, and deceptive README files to trick users into downloading malicious ZIP files. A particularly alarming evolution called **AgentBaiting** allows AI agents (including Claude, Gemini, and ChatGPT) to independently discover and act on these fraudulent repositories without any human involvement, meaning the attack no longer requires a victim to click a link.
North Korean Hackers Hijack 108 Packages Across npm, Go and Chrome in Sprawling PolinRider Campaign
North Korean threat actors linked to the Contagious Interview campaign have published 108 malicious packages and browser extensions across npm, Packagist, Go, and Google Chrome as part of an ongoing operation called PolinRider, which has compromised nearly 2,000 public GitHub repositories. The attackers use obfuscated JavaScript payloads, fake font files, and VS Code task files to deliver malware including BeaverTail, DEV#POPPER RAT, and OmniStealer, while rewriting Git history to make malicious changes appear legitimate and harder to detect. Developers are advised to treat any affected environments as fully compromised, rotate secrets, rebuild from clean lockfiles, and audit repositories for suspicious modifications to configuration files.
Supply Chain Attack Hits Packagist: Eight PHP Packages Compromised via GitHub-Delivered Malware
Eight packages on Packagist, the primary dependency registry for PHP projects, were quietly backdoored in a supply chain attack that used GitHub infrastructure to serve Linux malware.
Megalodon Attack Poisons Thousands of GitHub Repos via CI/CD Hijacking
Someone has been systematically targeting GitHub repositories at scale.
Typosquatting Has Outgrown the User Error Excuse
Typosquatting was once seen as a relatively simple phishing threat: a user mistypes a domain, lands on a malicious site, and becomes compromised. That model is now outdated. Modern typosquatting has moved beyond browsers into software package registries, dependency managers, and CI/CD pipelines, making it a software supply chain security issue rather than a user-awareness problem.
A Poisoned VS Code Extension Just Breached 3,800 GitHub Repositories
GitHub has confirmed that approximately 3,800 internal repositories were compromised after an employee installed a malicious VS Code extension, which was subsequently removed from the VS Code Marketplace and the affected device secured. The hacker group TeamPCP has claimed responsibility, advertising the stolen data on a cybercrime forum for at least $50,000, though GitHub states there is no evidence that customer data outside the breached repositories was affected. This incident is part of a broader pattern of malicious VS Code extensions targeting developers, with TeamPCP also previously linked to supply chain attacks on platforms including PyPI, NPM, and Docker.
OpenAI Hit by TanStack Supply Chain Attack After Two Employee Machines Infected
OpenAI confirmed it was caught up in the "Mini Shai-Hulud" npm supply chain attack, in which malware hidden in compromised TanStack packages reached two employee devices and allowed attackers to steal a limited amount of internal credentials. The two affected machines had not yet received updated supply chain security controls that would have blocked the malicious dependency. As a precaution, OpenAI is rotating signing certificates for several desktop products — including ChatGPT Desktop, Codex App, and Codex CLI — and says there is no evidence that customer data or production systems were compromised.