corpus.blog
41,554 blogs · 4,969,865 posts Claim your blog
Record · corpus.blog/posts/01a08c64-d28d-7338-875e-2f3983b03146

Supply chain attacks in the AI era: the state of open source in 2026

xergioalex.com · published 29 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at xergioalex.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
46
Words captured
5,369

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised
stepsecurity.io
https://socket.dev/blog/axios-npm-package-compromised
socket.dev
https://www.paloaltonetworks.com/blog/cloud-security/bitwardencli-supply-chain-attack/
paloaltonetworks.com
Postmortem: TanStack npm supply-chain compromise Read at the source ↗
tanstack.com
https://www.microsoft.com/en-us/security/blog/2026/05/20/mini-shai-hulud-compromised-antv-npm-packages-enable-ci-cd-credential-theft/
microsoft.com
https://www.microsoft.com/en-us/security/blog/2026/05/28/typosquatted-npm-packages-used-steal-cloud-ci-cd-secrets/
microsoft.com
https://www.sonatype.com/state-of-the-software-supply-chain/introduction
sonatype.com
https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem
cisa.gov
"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated November 26) Read at the source ↗
unit42.paloaltonetworks.com
https://www.endorlabs.com/learn/shai-hulud-the-third-coming----inside-the-bitwarden-cli-2026-4-0-supply-chain-attack
endorlabs.com
https://community.bitwarden.com/t/bitwarden-statement-on-checkmarx-supply-chain-incident/96127
community.bitwarden.com
Our response to the TanStack npm supply chain attack Read at the source ↗
openai.com
https://threats.wiz.io/all-actors/teampcp
threats.wiz.io
https://www.wiz.io/blog/durabletask-teampcp-supply-chain-attack
wiz.io
https://thehackernews.com/2026/02/lazarus-campaign-plants-malicious.html
thehackernews.com
https://thehackernews.com/2026/05/rubygems-suspends-new-signups-after.html
thehackernews.com
https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-742-spracklen.pdf
usenix.org
https://en.wikipedia.org/wiki/Slopsquatting
en.wikipedia.org
https://www.aikido.dev/blog/slopsquatting-ai-package-hallucination-attacks
aikido.dev
https://thehackernews.com/2026/05/compromised-nx-console-18950-targeted.html
thehackernews.com
https://thehackernews.com/2026/05/github-internal-repositories-breached.html
thehackernews.com
https://socket.dev/blog/sandworm-mode-npm-worm-ai-toolchain-poisoning
socket.dev
https://socket.dev/blog/trapdoor-crypto-stealer-npm-pypi-crates
socket.dev
https://red.anthropic.com/2026/mythos-preview/
red.anthropic.com
https://www.anthropic.com/glasswing
anthropic.com
https://github.com/xergioalex/xergioalex.com/pull/131
github.com
https://github.com/orgs/pnpm/discussions/8945
github.com
https://github.com/LavaMoat/LavaMoat
github.com
https://socket.dev/blog/npm-introduces-minimumreleaseage-and-bulk-oidc-configuration
socket.dev
https://nodejs.org/api/corepack.html
nodejs.org
https://pnpm.io/blog/releases/10.16
pnpm.io
https://pnpm.io/blog/releases/11.0
pnpm.io
https://pip-tools.readthedocs.io/
pip-tools.readthedocs.io
https://docs.astral.sh/uv/
docs.astral.sh
https://github.com/rustsec/rustsec
github.com
https://sum.golang.org/
sum.golang.org
https://docs.pypi.org/trusted-publishers/
docs.pypi.org
https://www.sigstore.dev/
sigstore.dev
https://docs.npmjs.com/trusted-publishers/
docs.npmjs.com
https://docs.npmjs.com/generating-provenance-statements/
docs.npmjs.com
https://spdx.dev/
spdx.dev
https://cyclonedx.org/
cyclonedx.org
https://scorecard.dev/
scorecard.dev
https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066
wiz.io
https://blog.pypi.org/posts/2024-11-14-pypi-now-supports-digital-attestations/
blog.pypi.org
https://rubycentral.org/news/ruby-centrals-oss-changelog-march-2025/
rubycentral.org
Elsewhere on xergioalex.com (1)