Last seen August 28, 2025

Claude Supply-Chain Compromise

Evidence indicates that Claude is affected by a supply-chain compromise.

Technical Severity

Low severity

Lifecycle Status

STABLE

Sources

1 source: securityweek.com

What Happened

Evidence indicates that Claude is affected by a supply-chain compromise.

Why This Matters

The evidence matters to defenders using Claude because it may place downstream environments at risk through compromised dependencies.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Claude is present in your environment and review the affected configuration.

Follow this incident as it develops Material-change notifications are being prepared for BugSkan Pro.

Exposure

Recommended Response

First Seen

Aug 28, 2025 05:30

Last Seen

Aug 28, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

Anthropic GitHub Google Claude Gemini Credential Exposure

Timeline

Incident first seen
Aug 28, 2025 05:30
BugSkan first recorded this incident.
Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack - SecurityWeek
Aug 28, 2025 05:30
securityweek.com · Vulnerability

Sources

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack - SecurityWeek

securityweek.com · Aug 28, 2025 05:30

Hackers exploited a vulnerable workflow in the Nx build system to achieve code injection and GITHUB_TOKEN theft, enabling the publication of malicious package versions. These malicious packages deployed a post-install script that exfiltrated thousands of sensitive credentials and notably weaponized AI assistants like Claude and Gemini for reconnaissance and data exfiltration.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.