supply-chain-attacks
Latest stories covering supply-chain-attacks, with summaries and links to related coverage.
3 articles · page 1 of 1
Connected topics
Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library
news
6 min read
The PyPI package 'lightning', versions 2.6.2 and 2.6.3, was compromised in a supply chain attack, affecting users of the PyTorch Lightning AI training library. The malicious versions include a hidden _runtime directory containing obfuscated JavaScript that activates upon running pip install lightning.
Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them
news
7 min read
A supply chain attack compromised 30 WordPress plugins, including Countdown Timer Ultimate, after a trusted developer was acquired by a new owner. The WordPress.org Plugins Team issued a security notice regarding the malicious backdoor found in these plugins.
Notepad++ supply chain attack breakdown
13 min read
On February 2, 2026, Notepad++ developers reported a compromise of their update infrastructure due to a hosting provider incident between June and September 2025. Attackers maintained access to internal services until December 2025, leading to multiple execution chains and payloads.