Supply Chain Security
48 articles RSS
Aikido and StepSecurity Say Stolen GitHub Credentials Have Been Used Since November 10 to Push the wfx CI Secret Stealer; Their Counts Differ
Aikido and StepSecurity say stolen GitHub credentials have pushed a CI secret stealer since November 10; their counts differ and no cited source says how the credentials were obtained.
Where Coding Agents Leave Secrets: A CI Prompt Injection, Saved Claude Code Approvals and AI-Driven GitHub Searches, as Reported in 2026
Three 2026 reports describe secrets exposed by a CI coding agent, saved in Claude Code approval files in public repositories, and sought by an agentic framework on GitHub; the sources agree on rotation but differ in scope and evidence.
Glow Labs Says Coding Agents Appear to Pick Archived MCP Servers From Training Data; No Fix Is Coming for a Reported Puppeteer Flaw
Per Help Net Security, Glow Labs says agents appear to take the package name from training data in 98% of sessions where a deprecated MCP server was installed or suggested.
eMudhra CA Compromise: uv Shipped Fixes October 20 and 21, an AWS CLI Fix Merged October 21, Azure CLI's certifi Pin Changed in 2.92.0 on November 3
A comparison of how uv, pip, CPython, the AWS CLI and the Azure CLI handled the compromised eMudhra intermediate CAs, drawing on release notes, pull requests, Mozilla and Cloudflare.
CVE-2026-111497: One Brotli Decoder Flaw Reached Node.js, .NET, Python Packages and Others Through Separate Bundled Copies
Reporting on the Brotli decoder flaw CVE-2026-111497 shows fixes, scanner coverage and exploitation status differing across Node.js, .NET, Python packages and others.
GitHub Actions Will Block pull_request_target by Default in Public Repositories From December 2, With Brownouts on November 9 and 16
GitHub's November 2 changelog says Actions will block pull_request_target by default in public repositories from December 2, 2026, after brownouts on November 9 and 16, unless an event policy allows it.
Dependabot Reachability Analysis Enters Public Preview for JavaScript and TypeScript, Labeling Alerts With Four Verdicts
GitHub says Dependabot reachability analysis is in public preview on Enterprise Cloud for JavaScript and TypeScript, using CodeQL call graphs to give each open alert one of four verdicts.
Wiz Says Gheist Campaign Uses Stolen GitHub Tokens to Print Repository Secrets Into Actions Logs, Succeeding in Private Repositories
Wiz Research says the Gheist campaign planted workflows from more than 850 compromised GitHub accounts; GitHub's approval hold covers only public repositories on github.com.
LiteLLM Revises Its 1.107.0 Breach Account, Tracing Entry to a Master Key Committed in May; Socket Finds Secret-Stealing Workflows Ran October 10
LiteLLM's root-cause analysis says an Agent Platform master key committed on May 27 and never revoked led to the 1.107.0 compromise, replacing its earlier log-leak theory; GitHub commits show exfiltration workflows on October 10 and 12.
Dependency Cooldowns Spread From pnpm and pip to Bundler, Dependabot and GitHub's Package Firewall While Critics Question the Approach
Sources describe package-install delays appearing in pnpm, pip, Bundler, Dependabot and GitHub's firewall with differing defaults, alongside an LWN-reported dispute over cooldowns versus upload queues.
Hijacked Maintainer Accounts and Reclaimed Repository Names: What October's GhostAction, OVHcloud and npm Cases Show About Release Controls
Comparing three October 2026 cases, GhostAction, the OVHcloud CLI release swap and npm's SlugFest trusted-publishing gap, on how accounts, names and release settings were exploited.
GitHub Puts a Package Firewall in Public Preview for Enterprise Cloud, Screening npm Installs With a Default One-Day Cooldown
GitHub's package firewall, in public preview for Enterprise Cloud, checks npm downloads against malware advisories, attestation changes and a minimum package age; only npm is supported.