Supply Chain Attack

Flat white line-art of an issue card linked to a padlock guarding a stack of repository panels — the "GitLost" GitHub disclosure.

Vulnerabilities

"GitLost" Disclosure: Researchers Say GitHub Agentic Workflows Could Leak Private Repository Data

An agentic-workflow data-exposure disclosure with organization-wide DevSecOps implications — defender review this week.

Flat white line-art of a shield with a broken section beside a row of terminal-window panels — GuardFall shell injection research affecting open-source AI

Artificial Intelligence (AI)

Adversa AI Research — “GuardFall” Shell Injection Bypasses 10 of 11 Open-Source AI Coding Agents

An AI-coding-agent bypass with cross-vendor implications — defender posture-review work for organizations running open-source agents this week.

Flat white line-art of a robotic agent head reading from a stack of instruction cards, one card flagged — Microsoft MCP tool-description poisoning research for

Artificial Intelligence (AI)

Microsoft Warns Poisoned MCP Tool Descriptions Can Turn AI Agents Into Data-Leak Channels

A fresh vendor-research disclosure at the intersection of AI agents and supply-chain risk — Microsoft says poisoned tool descriptions can quietly redirect what an agent does, and pairs the research with defender guidance for teams shipping agentic AI this week.

Flat white line-art of a code-editor window, a cloud holding a key, and a repository box — Amazon Q Developer VS Code extension flaw affecting cloud

Vulnerabilities

Researchers Disclose Amazon Q Developer VS Code Flaw Affecting Cloud Credentials

A coding-AI-assistant flaw with cloud-credential implications — defender posture review for the week.

Flat white line-art of a row of package boxes feeding a pipeline of connected nodes beside a large key — Miasma npm and GitHub Actions supply-chain activity.

Supply Chain Attack

Researchers Disclose "Miasma" Supply-Chain Wave Across 20+ npm Packages and GitHub Actions

Another JavaScript-ecosystem supply-chain disclosure puts developer-secret rotation and GitHub Actions auditing back at the top of the defender to-do list — this time as a fresh wave of the ongoing Miasma cluster.

Flat white line-art of a marketplace storefront with a grid of skill tiles and an agent head outline — OpenClaw AI coding agent skill-marketplace risks.

Artificial Intelligence (AI)

Researchers Disclose "OpenClaw" Skill-Marketplace Risks for AI Coding Agents

AI-coding-agent skill marketplaces are an emerging supply-chain surface — defenders have inventory work this week.

Flat white line-art of a three-node build pipeline with a branch-and-merge fork feeding a repository box — Cordyceps CI/CD GitHub repository disclosure.

Supply Chain Attack

Researchers Disclose "Cordyceps" CI/CD Flaws Affecting 300+ GitHub Repositories

Supply-chain audit work for organizations using GitHub-hosted CI/CD: a research firm found a recurring pull-request handling and workflow-permission pattern that left 300-plus repositories open to attacker-controlled code execution.

Flat white line-art of a row of package boxes beside an attribution tag card and a flag pin — Microsoft Mastra npm Sapphire Sleet attribution.

Supply Chain Attack

Microsoft Attributes Mastra AI Supply Chain Compromise to Sapphire Sleet

Microsoft's attribution analysis ties the JavaScript-ecosystem compromise to a North-Korea-linked cluster, assessing with high confidence that the actor it tracks as Sapphire Sleet published poisoned Mastra packages to reach developers and crypto wallets.

Flat white line-art of an envelope, a key, and a plugin tile — Gravity SMTP WordPress plugin API-key exposure.

Vulnerabilities

Hackers Exploit Gravity SMTP WordPress Plugin Bug (CVE-2026-4020) to Expose API Keys

A WordPress plugin vulnerability requires API-key rotation work for affected site administrators, after researchers found an unauthenticated endpoint leaking live mail-provider credentials from roughly 100,000 installations.

Flat white line-art of a row of package boxes with one flagged tile beside a contributor key card — Mastra npm contributor-account compromise.

Supply Chain Attack

145 Mastra npm Packages Compromised via Hijacked Contributor Account

Another contributor-account compromise hits the JavaScript ecosystem — defenders using Mastra packages have inventory and rotation work this week.

Flat white line-art of a package box with a toggle switch flipped off above an install pipeline, on a Mulberry background — npm 12 install-script default change.

Supply Chain Attack

GitHub Announces NPM 12 Default-Behavior Change for Install Scripts

The default flips — npm 12 changes the install-script behavior that has driven years of supply-chain reform debate.

Flat white line-art of a sealed toolbox opening above a row of code repositories — Miasma toolkit open-sourced on GitHub.

Supply Chain Attack

Miasma Supply-Chain Worm Open-Sourced on GitHub

Miasma's open-sourcing turns the previous day's Microsoft-repo incident into the first instance of a much broader supply-chain threat any actor can now reproduce.

See all