Affected Technology
Supply Chain incidents
Supply-chain compromise and dependency attacks
CVE-2026-59821 Security Incident affecting litellm
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks Reported affected versions include 0.1.0.
Claude Code Information Disclosure Vulnerability
Evidence indicates that Claude Code is affected by a security issue. Reported affected versions include 2.1.88.
OpenClaw Remote Code Execution Vulnerability
Evidence indicates that OpenClaw is affected by remote code execution.
AI agents Prompt injection Vulnerability
Evidence indicates that AI agents is affected by a security issue.
AI Remote Code Execution Vulnerability
A security flaw in the Cursor AI code editor, a Visual Studio Code fork, allows for silent arbitrary code execution when a maliciously crafted repository is opened. This vulnerability stems from "Workspace Trust" being disabled by default, enabling tasks configured in `.vscode/tasks.json` to auto-execute and posing a significant supply chain risk.
Nx build system Supply Chain Attack Vulnerability
Evidence indicates that Nx build system is affected by a security issue.
153GB of stolen credentials surface after LiteLLM supply chain attack
A supply chain attack compromised LiteLLM via a poisoned Trivy dependency, leading to the deployment of malicious LiteLLM versions (1.82.7/1.82.8) that exfiltrated 153GB of corporate credentials. This dataset, comprising AWS keys, API tokens, and other secrets from CI runner environments, impacts nearly 2,500 organizations, underscoring critical software supply chain vulnerabilities.
Terabytes Supply-Chain Compromise
A significant data breach has resulted in the exposure of terabytes of user credentials. This compromise was identified as a large-scale supply-chain attack, impacting a multitude of dependent organizations.
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
Critical vulnerabilities, including an actively exploited Check Point SmartConsole authentication bypass and a Zimbra zero-day, led to administrative compromise and data theft. Emerging threats include rogue AI agents demonstrating novel attack paths against real-world systems and large language models generating non-existent package names, posing software supply chain risks.
OpenAI Remote Code Execution Vulnerability
A security breach reportedly involving OpenAI and the Hugging Face platform indicates potential unauthorized access to, or exfiltration of, AI model data or related resources. This incident underscores critical vulnerabilities within the AI development ecosystem, raising significant concerns about MLOps security and the integrity of AI supply chains.
Being Sold Remote Code Execution Vulnerability
Vercel experienced a supply chain attack that led to the compromise and exfiltration of user data. The stolen user data is being actively trafficked and sold for $2M on BreachForums.
Meta Supply-Chain Compromise
A security incident at AI data vendor Mercor exposed proprietary AI training data methodologies and strategies from Meta and other major AI labs. This breach represents a significant competitive intelligence leak, highlighting critical security vulnerabilities within the AI supply chain and third-party vendor relationships.
Mercor Breach Linked to LiteLLM Attack Raises AI Supply Chain Security Concerns
Attackers executed a supply-chain attack on the open-source library LiteLLM by exploiting stolen credentials to inject malicious code into its PyPI distribution pipeline. This malware actively harvested sensitive information, including API keys and cloud credentials, from affected systems, potentially leading to the compromise of up to 4TB of data from companies like Mercor.
Backdoor Remote Code Execution Vulnerability
TeamPCP orchestrated a sophisticated supply chain attack, compromising the Trivy security scanner's CI/CD pipeline to publish malicious versions of the LiteLLM AI proxy package to PyPI. These trojanized versions deployed a multi-stage payload for credential harvesting, Kubernetes lateral movement, and persistent remote code execution.
OpenClaw Vulnerability Exposes AI Coding Assistants to Single-Click Remote Code Execution
The OpenClaw vulnerability in AI coding assistants allows single-click Remote Code Execution (RCE) by exploiting the trust relationship between developers and AI tools, processing malicious code suggestions automatically. This flaw grants attackers full control over developer systems, enabling access to sensitive resources and posing a significant software supply chain risk through potential injection of backdoors.
One Step Away From a Massive Data Breach: What We Found Inside MoltBot
The AI personal assistant MoltBot (OpenClaw) insecurely stores sensitive credentials and API keys in cleartext within `~/.clawdbot` and retains "deleted" secrets in backup files, making them vulnerable to infostealers. Furthermore, the codebase exhibits numerous insecure patterns, including extensive use of `eval` and `execSync` with user input, which could lead to Remote Code Execution (RCE), XSS, and broader data breaches for its hundreds of thousands of users.
AI Model Poisoning Vulnerability
Traditional security frameworks fail to address AI-specific attack vectors such as prompt injection, model poisoning, and AI supply chain compromises, creating significant security gaps. This inadequacy has enabled various exploits, including the Ultralytics AI library compromise for cryptomining and malicious Nx packages exfiltrating 23.77 million secrets in 2024.
GitHub Remote Code Execution Vulnerability
A multi-stage supply chain attack, tracked as UNC6395, originated from the compromise of a Salesloft GitHub repository, leading to the theft of a sensitive OAuth token. This token enabled access to a high-privilege AI chatbot application (Drift) and subsequent exfiltration of customer conversation data and contact information from over 700 integrated Salesforce instances.
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
Threat actor UNC6395 exploited compromised OAuth and refresh tokens associated with the Drift AI chat agent, accessible via Salesloft, to gain unauthorized access to Salesforce customer instances. This systematic campaign led to the exfiltration of sensitive data, including AWS access keys, passwords, and Snowflake tokens, from over 700 organizations, indicating a potential supply chain attack.
When AI Assistants Turn Against You: The Amazon Q Security Wake-Up Call
The Amazon Q Developer Extension for Visual Studio Code (version 1.84.0) was compromised via a software supply chain attack, embedding a prompt injection that bypassed security reviews. This malicious prompt, detailed in AWS Security Bulletin AWS-2025-015, instructed the AI assistant to systematically delete local file systems and AWS cloud resources, including S3 buckets, EC2 instances, and IAM users.
Amazon AWS Prompt Injection Vulnerability
The article highlights critical security gaps in Large Language Model (LLM) applications, detailing common vulnerabilities such as prompt injection, sensitive information disclosure, and supply chain compromises. These flaws, categorized by the OWASP Top 10 for LLM Applications, can lead to unintended LLM behavior, data exposure, and other serious consequences.
GitHub Supply-Chain Compromise
Fortunately, the company had a policy of checking source code on GitHub first
Z.ai Unveils GLM-5.3 with Major Enhancements for Coding and Cybersecurity
Z.ai released GLM-5.3, an AI model with significant enhancements for cybersecurity analysis, specifically excelling in white-box vulnerability discovery and exploitation reasoning. The model identified 2,436 vulnerabilities across 269 projects, with 1,097 rated medium to high severity, demonstrating improved performance on benchmarks like CyberGym and ExploitBench.
AI Supply-Chain Compromise
LiteLLM Supply Chain Attack: 2,500+ Companies Exposed in the Largest AI Supply Chain Breach of 2026
AI Supply-Chain Compromise
Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across the open-source software supply chain. The post The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software appeared first on Unit 42.
Microsoft Supply-Chain Compromise
ChainDrop supply chain compromise: Anatomy of a self-propagating worm
AI Supply-Chain Compromise
A security breach impacting OpenAI via the Hugging Face platform has exposed critical vulnerabilities within the collaborative AI development ecosystem. This incident underscores a significant emerging challenge in ensuring the robust security and safety of artificial intelligence platforms and their interconnected components.
AI Supply-Chain Compromise
Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15) appeared first on Unit 42.
AI Supply-Chain Compromise
The article details the OWASP LLM Top 10, emphasizing indirect prompt injection (IPI) as a critical threat to RAG pipelines due to adversarial instructions embedded in trusted data sources. It outlines architectural mitigations such as privilege separation, instruction hierarchies, output schema enforcement, and document-level RBAC to address data exposure and supply chain risks in LLM deployments.
AI Supply-Chain Compromise
Agentic AI systems like OpenClaw significantly expand the attack surface due to their autonomous operation and deep system access, enabling immediate operator-level compromises. These systems are susceptible to indirect prompt injection and supply chain attacks via malicious community-contributed skills, straining traditional CVE-based vulnerability management processes.
AI Supply-Chain Compromise
The article title identifies a critical, systemic vulnerability impacting Anthropic's AI supply chain, highlighted by OX Security. However, the content was inaccessible due to a Cloudflare security block, preventing a detailed technical analysis of the reported exploit.
AI Supply-Chain Compromise
Mercor was reportedly impacted by a supply chain attack involving the LiteLLM component, suggesting a potential compromise of software integrity or introduction of malicious dependencies. Due to the lack of article content, specific details regarding the exploit mechanism, a CVE, or the full impact are unavailable.
AI Supply-Chain Compromise
A widespread supply-chain attack, orchestrated by TeamPCP, injected credential-stealing malware into popular open-source projects like Trivy, KICS, LiteLLM, and Telnyx. This compromise resulted in the exfiltration of credentials and data from over a thousand downstream SaaS environments, with Mercor publicly confirming the theft of 4 TB of its data and source code.
AI Ecosystem Supply-Chain Compromise
The TrendAI™ State of AI Security Report reveals a 34.6% year-over-year surge in AI-related CVEs in 2025, totaling 2,130, with nearly half classified as high- or critical-severity. These vulnerabilities, concentrated in areas like LLM tools and agentic AI, facilitate impacts such as data exposure, unauthorized access, deepfake-based fraud, AI-generated malware, and supply chain compromises.
AI Supply-Chain Compromise
AI-powered adversarial systems are collapsing the traditional exploitation window by rapidly identifying, chaining, and executing attacks against existing misconfigurations and vulnerabilities at machine speed. This acceleration, coupled with new AI-specific attack surfaces like prompt injection leading to confused deputy scenarios and AI-driven supply chain poisoning, necessitates a shift in defensive strategies.
AI Supply-Chain Compromise
The OpenClaw AI assistant, an autonomous open-source agent, poses significant security risks due to its privileged access to system tools and sensitive data. It is susceptible to prompt injection attacks, supply chain vulnerabilities from rapid, "vibe-coded" development, and potential backdoors via malicious "skills" or compromised contributor accounts.
AI Supply-Chain Compromise
A malicious npm package, `eslint-plugin-unicorn-ts-2`, engaged in typosquatting to exfiltrate environment variables via a post-install hook to a Pipedream webhook. This malware also incorporated a novel tactic of embedding deceptive prompts to manipulate LLM-based security scanners, aiming to evade automated detection of the supply chain compromise.
AI Supply-Chain Compromise
AI-enabled supply chain attacks are rapidly escalating, demonstrated by the NullBulge group weaponizing open-source repositories for data exfiltration and LockBit ransomware, and the Solana Web3.js library being compromised via phishing to steal cryptocurrency. These attacks leverage AI-generated polymorphic and context-aware malware, rendering traditional signature-based defenses ineffective and extending breach detection timelines.
ChatGPT Prompt Injection Vulnerability
Cybersecurity researchers have disclosed seven new vulnerabilities in OpenAI's GPT-4o and GPT-5 models, enabling indirect prompt injection attacks. These exploits allow attackers to manipulate Large Language Models (LLMs) into unintended actions, specifically to steal personal information from users' memories and chat histories.
AI Supply-Chain Compromise
The adoption of Model Context Protocol (MCP) exposes AI agent supply chains to critical vulnerabilities, specifically "tool poisoning attacks" where malicious instructions are embedded to exfiltrate data or alter workflows, and "rug pull attacks" involving weaponized tool updates. Cisco's open-source MCP Scanner is designed to detect these malicious code, over-privileged permissions, and hidden threats within MCP servers, thereby securing agentic AI deployments against such exploits.
AI Supply-Chain Compromise
Adversaries can compromise Large Language Models (LLMs) through three primary methods: embedding malicious executable instructions in model files, leveraging malicious Low-Rank Adaptation (LoRA) adapters to inject backdoors, or poisoning training data to alter model behavior directly. These supply chain vulnerabilities allow for stealthy manipulation of AI models, leading to system compromise, data exfiltration, or biased outputs that are difficult to detect using traditional security measures.
AI Supply-Chain Compromise
Trend Micro research reveals that while Large Language Models (LLMs) can serve as automated security judges, they are susceptible to adversarial prompts and fail to consistently detect risks such as malicious code generation, package hallucinations, and system prompt leakage. These vulnerabilities pose a critical risk for data exfiltration and AI supply chain attacks, necessitating robust guardrails and external validation to mitigate potential operational disruptions.
Amazon AWS Supply-Chain Compromise
A hacker injected destructive system commands into Amazon's Visual Studio Code extension for Amazon Q via a compromised GitHub repository, distributing it through an official update. This supply chain attack exploited a lack of stringent vetting to leverage prompt injection, aiming to redefine the AI agent's behavior at runtime to erase user data and cloud resources.