Supply Chain Security

This page may contain stale information. Last updated: 2026-09-16

Definition

Security practices protecting software supply chains from dependency tampering, malicious packages, and CI/CD compromise. Related to supply-chain-attacks.

Recent Developments

• 2026-09-17: cloudflare security-audit-skill includes dedicated supply-chain attack-class prompts in multi-phase agentic audit pipeline (2026-09-17-cloudflare-security-audit-skill-lavx)

• 2026-09: baseten — live GitHub admin PAT in public Harbor Docker image (March 2023 build); rotated within 24h; no exploitation evidence (2026-09-15-baseten-github-pat-security-breach)

• 2026-08-12/14: LiteLLM aftermath — still-live credentials across ~2,488 domains five months later (ai-proxy-supply-chain-risk, 2026-08-14-litellm-credentials-still-live)

• 2026-08-04: Active shai-hulud-worm incident reinforces install-script hygiene, lockfile audit, credential rotation; runtime defenses (runtime-exploit-blocking) rise in parallel (2026-08-04-npm-shai-hulud-keyv-supply-chain-attack)

• 2026-07-14: untrusted-search-path RCE in Cursor via planted git.exe

• 2026-06-30: guardfall — adversa-ai structural shell guard bypass in 10/11 open-source coding-agents; decades-old Bash tricks defeat regex denylists after guard approval (2026-06-30-adversa-ai-bash-tricks-coding-agents)

• 2026-06-30: oracle CVE-2026-46817 — CVSS 9.8 active exploitation in EBS Payments; /OA_HTML/ibytransmit endpoint (defused-cyber, 2026-06-30-oracle-ebs-cve-2026-46817-active-exploitation)

• 2026-06-24: gemini-cli CVE-2026-12537 — CVSS 10.0 RCE via malicious .gemini/.env on headless CI; ai-agent-ci-security (2026-06-29-google-gemini-cli-cve-2026-12537, novee-security research)

• 2026-06-25: akrites — linux-foundation industry SIRT for coordinated OSS vulnerability disclosure as AI accelerates discovery (2026-06-25-linux-foundation-akrites-open-source-security)

• 2026-06-25: mozilla-0din PoC — clean GitHub repos trick coding-agents into reverse shells via DNS TXT payloads (2026-06-27-mozilla-0din-claude-code-github-malware)

• 2026-06-27: dirtyclone (CVE-2026-43503) — Linux kernel LPE bypassing dirtyfrag mitigations (jfrog)

• 2026-06-26: amazon-q-developer CVE-2026-12957 — MCP workspace config auto-execution; AWS credential theft

• 2026-06-25: langflow CVE-2026-33017 — unauthenticated RCE on self-hosted AI pipelines

• 2026-06-23: cordyceps — systemic github-actions CI/CD vulnerability class; 300+ exploitable chains at major OSS projects (2026-06-25-novee-cordyceps-github-actions-supply-chain)

• 2026-06-22: patch-the-planet — openai + trail-of-bits AI-assisted OSS patching with human review; Python, Go, cURL, PyPI, Linux kernel in scope; 64 PRs week one (2026-06-22-openai-patch-the-planet-oss-security)

• 2026-06-23: apple acquired swift-package-index — package signing roadmap addresses Swift supply chain trust

Related

• dataset-pipeline-rce

• hugging-face-ai-agent-security-incident

• cursor-git-exe-rce

• oracle

• cybersecurity

• dirtyfrag

• langflow

• amazon-q-developer

• jfrog

• novee-security

• snyk

• baseten

• docker-image-secrets

• secrets-management

• socket

• shai-hulud-worm

• cordyceps

• akrites

• mozilla-0din

• coding-agents

• ai-agent-security

• patch-the-planet

• trail-of-bits

• openai

• swift-package-index

• supply-chain-attacks

• cybersecurity

• npm

• github-security