Tag

supply chain

7 stories

Cursor: Malicious Claude Code Extension in VS Code Marketplace Carried SSH Backdoor for 11 Hours

Cursor confirmed that weaponized builds of the Claude Code extension briefly appeared in its Visual Studio Code extension marketplace on October 29, 2026. For roughly eleven hours those tampered packages attempted to harvest host details and install an SSH backdoor intended to provide persistent remote access. Cursor says the compromised builds were not produced by Anthropic and that distribution was limited to specific versions of the extension. Timeline and affected…

Saugata DattaOct 31, 20263 min read122

Data Breach

Supply-chain Breach: How a Leaked LiteLLM Master Key Let Attackers Push a Malicious PyPI Release

LiteLLM disclosed a serious supply-chain incident that began with a single accidentally published configuration file and escalated into a malicious package release that could execute whenever Python started. The exposure of an Agent Platform master key in late May 2026 went unrevoked and, months later, an attacker used it to extract high-privilege GitHub tokens, override release safeguards, and publish a trojaned LiteLLM package to PyPI. The fallout forced an emergency…

Saugata DattaOct 24, 20265 min read206

Artificial Intelligence

How the Google Gemini CLI Flaw Turned CI/CD Pipelines into Remote Code Execution Risk

A critical remote code execution (RCE) vulnerability in the Google Gemini CLI and its associated GitHub Action exposed a startling weakness in how AI tooling can interact with developer infrastructure. Rated with the maximum CVSS score of 10.0, the bug allowed unprivileged external actors to execute commands on the machines running CI/CD workflows. This wasn’t a prompt-injection trick against a model; it was an infrastructure-level failure that allowed malicious configuration…

Saugata DattaApr 30, 20264 min read453

Artificial Intelligence

Anthropic’s MCP Design Flaw: How a Protocol-Level Vulnerability Enables Remote Code Execution at Scale

A critical architectural flaw in Anthropic’s Model Context Protocol (MCP) ecosystem has exposed a vast number of downstream systems to remote code execution (RCE) risks. Researchers at OX Security found the issue embedded across official MCP SDKs for Python, TypeScript, Java, and Rust — meaning developers building on MCP inherit the vulnerability by design rather than through a simple coding bug. The implications are severe: arbitrary command execution, data exfiltration,…

Saugata DattaApr 21, 20264 min read626

Artificial Intelligence

Accio and Alibaba: How AI Is Rewiring Sourcing for Small Online Sellers

When Mike McClary decided to revive a discontinued flashlight that had once been one of his best sellers, he didn’t dust off the old supplier spreadsheet or spend weeks emailing factories. Instead, he opened Accio, an AI-powered sourcing assistant on Alibaba.com, and started a conversation. Within weeks he had a redesigned product, a recommended factory in Ningbo, and a projected per-unit manufacturing cost that dropped from about $17 to roughly…

Saugata DattaApr 7, 20265 min read716

Web Development

Supply-chain alert: axios NPM package poisoned to deliver WAVESHAPER.V2 backdoor

A high-risk software supply chain attack has poisoned widely used axios npm releases, turning routine installs into a cross-platform compromise. Developers, CI/CD systems, and production pipelines that pulled the tainted axios versions (1.14.1 and 0.30.4) risked silently receiving a multi-stage backdoor that targeted Windows, macOS, and Linux hosts. Because axios sits deep in many dependency trees, a single malicious release can reach far beyond direct consumers — affecting developer laptops,…

Saugata DattaApr 1, 20264 min read539

Cloud Computing

AstraZeneca Allegedly Targeted by LAPSUS$ — Claims of a 3GB Internal Data Dump

A known hacking collective identifying as LAPSUS$ has posted claims that it obtained and is attempting to sell a 3GB .tar.gz archive allegedly containing AstraZeneca internal data. As of the reports dated March 20, 2026, AstraZeneca had not issued a public statement confirming or denying the claim. What the threat actors presented The actors published teasers and screenshots on breach forums and offered password-protected paste samples as proof. They reportedly…

Saugata DattaMar 23, 20262 min read772

Cursor: Malicious Claude Code Extension in VS Code Marketplace Carried SSH Backdoor for 11 Hours

Supply-chain Breach: How a Leaked LiteLLM Master Key Let Attackers Push a Malicious PyPI Release

How the Google Gemini CLI Flaw Turned CI/CD Pipelines into Remote Code Execution Risk

Anthropic’s MCP Design Flaw: How a Protocol-Level Vulnerability Enables Remote Code Execution at Scale

Accio and Alibaba: How AI Is Rewiring Sourcing for Small Online Sellers

Supply-chain alert: axios NPM package poisoned to deliver WAVESHAPER.V2 backdoor

AstraZeneca Allegedly Targeted by LAPSUS$ — Claims of a 3GB Internal Data Dump

Free Tools: IP, DNS, SSL