Topic

#supply-chain

4 articles tagged “supply-chain”.

Close-up photograph of a computer monitor displaying lines of code in a dark environment.

Microsoft Suspends 70+ Repos After AI Dev Password Theft

Attackers injected credential-harvesting malware into more than 70 Microsoft GitHub repositories, triggering inside AI coding assistants and exposing supply-chain fragility.

Jun 10, 20264 min read

Programming

Malware dev tries to steal Claude users' secrets and leaks own GitHub private token

A novice developer flooded npm with a sloppy infostealer targeting AI coding users, but embedded a hardcoded GitHub token that let researchers instantly map and dismantle the attack infrastructure.

May 28, 20264 min read

Rows of blinking blue LED indicators on black server racks inside a data center.

DevSecOps

GlassWorm Takedown Shatters Four-Layer Dev Supply Chain Botnet

CrowdStrike, Google, and Shadowserver severed all four C2 channels of the GlassWorm botnet, disrupting a supply-chain operation infecting over 300 GitHub repos and hijacking developer workstations since early 2025.

May 27, 20263 min read

DevSecOps

AI writes most of the code now. Socket just raised $60M on the part nobody reviews.

Socket hit a $1B valuation selling supply-chain security to the same AI labs flooding the supply chain. When generation gets free, verification gets valuable — the fight is over who owns the door.

May 22, 20263 min read