Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A routine software update for Anthropic's Claude Code tool accidentally leaked its entire source code, sparking rapid ...
A judge has temporarily blocked the Pentagon from labeling Anthropic a supply chain risk and ordering government agencies to ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
Language package managers like pip, npm, and others pose a high risk during active supply chain attacks. However, OS updates ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Xiaomi rolls out the final HyperOS update for Xiaomi 12 and 12 Pro, even though the devices have already reached ...
TeamPCP strikes again, with almost identical code to LiteLLM.
The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.
TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver ...
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.