Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• Weekly Threat Bulletin – May 6th, 2026

  F5 Labs

  T1190 99% T1068 96% T1505.003 95%
  just now
• Sophisticated Quasar Linux RAT Targets Software Developers

  SecurityWeek

  T1195.001 97% T1195.002 71% T1587 33%
  18 minutes ago
• QLNX Targets Developers in Supply Chain Credential Theft Campaign

  GBHackers

  T1195.001 97% T1587 70% T1014 67%
  1 hour ago
• Malicious PyTorch Lightning update hits AI supply chain security

  Security Affairs

  T1195.001 99% T1195.002 64% T1204.002 49%
  3 hours ago
• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• pnpm 11 Enables Default Release-Age Guard to Curb npm Supply Chain Attacks

  GBHackers

  T1195.001 98% T1587 88%
  1 day ago
• Backdoored PyTorch Lightning package drops credential stealer

  Bleeping Computer

  T1195.001 94% T1195.002 79% T1204.002 58%
  1 day ago
• TeamPCP Weekly Analysis: 2026-W18 (2026-04-27 through 2026-05-03), (Mon, May 4th)

  SANS ISC Diaries

  T1195.001 99% T1486 95% T1485 93%
  1 day ago
• ⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

  The Hacker News

  T1195.001 98% T1204.002 97% T1566.002 93%
  1 day ago
• Local Guardrails for Secrets Security in the Age of AI Coding Assistants

  GitGuardian

  T1195.001 99% T1587 47%
  1 day ago
• 4th May – Threat Intelligence Report

  Check Point Research

  T1190 98% T1195.001 98% T1195.002 79%
  1 day ago
• 2026: The Year of AI-Assisted Attacks

  The Hacker News

  T1195.001 97% T1588.002 92% T1195 50%
  1 day ago
• Malicious TanStack Package Abuses Postinstall Script to Steal Developer Secrets

  GBHackers

  T1195.001 100% T1587 82% T1195.002 66%
  1 day ago
• Attackers Hijack SAP npm Packages to Steal Dev Secrets

  GBHackers

  T1195.001 100% T1195.002 73% T1587 64%
  2 days ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  2 days ago
• The npm Threat Landscape: Attack Surface and Mitigations (Updated May 1)

  Palo Alto Unit 42

  T1195.001 99% T1027 98% T1587 95%
  4 days ago
• Developers warned to avoid 'early-access' Google Gemini tools

  IT Pro

  T1059.001 83% T1587 75% T1195.001 74%
  4 days ago
• The never-ending supply chain attacks worm into SAP npm packages, other dev tools

  The Register

  T1195.001 99% T1195 94% T1587 71%
  5 days ago
• Let's enable MFA for all Ruby gems

  Lobsters — security tag

  T1195.001 98% T1587 35%
  5 days ago
• PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

  The Hacker News

  T1195.001 100% T1587 75% T1195.002 73%
  5 days ago
• ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

  The Hacker News

  T1056.001 99% T1195.001 99% T1190 97%
  5 days ago
• SAP npm package attack highlights risks in developer tools and CI/CD pipelines

  CSO Online

  T1195.001 99% T1587 53%
  6 days ago
• lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

  Snyk Blog

  T1195.001 98% T1587 47% T1567.001 43%
  6 days ago
• Weekly Threat Bulletin – April 29th, 2026

  F5 Labs

  T1195.001 99% T1190 98% T1003.001 93%
  6 days ago
• SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack

  The Hacker News

  T1195.001 99% T1204.002 89% T1587 75%
  6 days ago
• New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

  The Hacker News

  T1195.001 99% T1587 89% T1204.005 87%
  6 days ago
• Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets

  Infosecurity Magazine

  T1195.001 98% T1587 96% T1204.005 87%
  6 days ago
• "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

  Snyk Blog

  T1195.001 99% T1587 76% T1204.002 33%
  2026-04-29
• CyberheistNews Vol 16 #17 [Heads Up] This Sophisticated Scam Should Be a Warning to All Companies

  KnowBe4 Blog

  T1566.002 98% T1195.001 97% T1657 93%
  2026-04-28
• Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation

  Infosecurity Magazine

  T1195.001 100% T1587 85% T1204.005 34%
  2026-04-24
• Intelligence Insights: April 2026

  Red Canary

  T1059.003 100% T1195.001 96% T1566.002 61%
  2026-04-23
• Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

  The Hacker News

  T1195.001 100% T1195.002 87% T1587 71%
  2026-04-23
• ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

  The Hacker News

  T1190 99% T1195.001 95% T1486 92%
  2026-04-23
• No Off Season: Three Supply Chain Campaigns Hit npm, PyPI, and Docker Hub in 48 Hours

  GitGuardian

  T1195.001 99% T1587 79% T1552.001 35%
  2026-04-23
• Tradecraft Tuesday Recap: axios npm Supply Chain Compromise

  Huntress

  T1195.001 99% T1566.004 94% T1587 82%
  2026-04-21
• The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables

  Trend Micro Research

  T1195.001 98% T1525 89% T1199 83%
  2026-04-20
• CASI Leaderboard Shifts: Developer Role Attack, and Three Concerning Incidents

  F5 Labs

  T1195.001 96% T1195.002 45% T1587 42%
  2026-04-09
• Delivered by Trust: What the Axios Supply Chain Attack Means for Security Leaders

  Bishop Fox

  T1195.001 97% T1195 73% T1587 48%
  2026-04-06
• Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads

  Trend Micro Research

  T1497.001 99% T1059.001 93% T1195.001 76%
  2026-04-03
• Mitigating the Axios npm supply chain compromise

  Microsoft Threat Intelligence

  T1071.001 99% T1195.001 98% T1059.001 98%
  2026-04-01
• Threat Brief: Widespread Impact of the Axios Supply Chain Attack

  Palo Alto Unit 42

  T1071.001 98% T1195.001 98% T1105 78%
  2026-04-01
• Hackers Hijack Axios npm Package to Spread RATs

  Infosecurity Magazine

  T1195.001 98% T1587 87% T1078 41%
  2026-04-01
• Supply Chain Compromise of axios npm Package

  Huntress

  T1195.001 99% T1071.001 98% T1059.001 94%
  2026-03-31
• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  Mandiant

  T1195.001 98% T1195.002 93% T1071.001 92%
  2026-03-31
• Malicious Axios Packages Published to npm in New Supply Chain Compromise

  Truesec

  T1195.001 97% T1078 65% T1587 46%
  2026-03-31
• Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

  Trend Micro Research

  T1195.001 99% T1027 98% T1059.001 96%
  2026-03-31
• Compromised axios npm package delivers cross-platform RAT

  Datadog Security Labs

  T1195.001 98% T1059.001 97% T1195.002 94%
  2026-03-31
• Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

  Trend Micro Research

  T1195.001 98% T1552.004 98% T1059.006 87%
  2026-03-26
• New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware

  Infosecurity Magazine

  T1195.001 86% T1587 66% T1204.002 61%
  2026-03-24
• LiteLLM and Telnyx compromised on PyPI: Tracing the TeamPCP supply chain campaign

  Datadog Security Labs

  T1195.001 99% T1195.002 62% T1587 58%
  2026-03-24