Up to 5,000 Cursor users got the tampered build

A tampered Claude Code extension on Open VSX planted an SSH backdoor and sent developer data to the attacker.

At a Glance Malware Family Hugging Face malware campaign (peakminer cryptominer, /tmp/.cch/svc.py watchdog, reconnecting reverse shells, and container escape tools) Threat Actor Unattributed; suspected financially motivated Chinese-speaking operator or group Target / Victims Self-hosted AI infrastructure (Xinference and GPUStack), shared GPU notebooks, research clusters (over 32,000 downloads across 31 campaign and 13 linked repositories) Delivery Vector

Hardware wallet manufacturer Trezor issued an urgent security alert regarding physical supply chain tampering. Specifically, security investigators identified a sophisticated Trezor hardware wallet implant hidden inside an altered Safe 5 unit. A customer originally purchased the compromised device from Southeast Asian distributor CryptoBilis. Furthermore, the clandestine module captured recovery seed phrases directly from the internal display and transmitted confidential credentials over cellular networks.

TL;DR On November 2, 2026, at 02:06 UTC, an attacker used stolen credentials to break into OPSSHIELD's update distribution network. In this cPGuard supply chain attack, the intruder then pushed a malicious script to Linux servers through the security product's own update channel. OPSSHIELD confirms the attacker retrieved data from some customer servers. cPGuard versions 5.88.12 through 5.88.19 shipped a script that installed a backdoor and stole root credentials.

Decentralized prediction venue Polymarket faced a severe security incident on October 29, 2026. Specifically, an intrusion compromised a third-party analytics script to siphon customer balances illicitly. Consequently, platform administrators suspended new transactions to halt unauthorized fund movements. As reported in coverage by Reuters on the Polymarket trading outage, engineers quickly contained the breach and resumed exchange operations. Furthermore, corporate leadership pledged full financial restitution for verified losses.

Decentralized prediction venue Polymarket faced a severe security incident on October 29, 2026. Specifically, an intrusion compromised a third-party analytics script to siphon customer balances illicitly. Consequently, platform administrators suspended new transactions to halt unauthorized fund movements. As reported in coverage by Reuters on the Polymarket trading outage, engineers quickly contained the breach and resumed exchange operations. Furthermore, corporate leadership pledged full financial restitution for verified losses.

A solitary compromised file allowed cybercriminals to harvest credit card data across dozens of prominent Brazilian retailers. Specifically, the malicious actors embedded an invisible digital skimmer inside a routine analytics script. The infected script loaded automatically whenever shoppers finalized purchases online. Consequently, the Convertr supply chain attack transformed a standard tracking tool into an expansive card-stealing pipeline. Targeting Shared Infrastructure Across Fashion Brands…

TL;DR In the first half of 2026, Kaspersky found a malicious CAB archive sitting in a Windows update download folder. It led to NetamLoader, a new .NET loader built on XAML markup. Kaspersky says the evidence "strongly indicates a supply-chain attack" on a custom Windows build used only by Asian government bodies. What happened The trail began with a Kaspersky Security Network alert on a single .config file.

A solitary compromised file allowed cybercriminals to harvest credit card data across dozens of prominent Brazilian retailers. Specifically, the malicious actors embedded an invisible digital skimmer inside a routine analytics script. The infected script loaded automatically whenever shoppers finalized purchases online. Consequently, the Convertr supply chain attack transformed a standard tracking tool into an expansive card-stealing pipeline. Targeting Shared Infrastructure Across Fashion Brands…

Microsoft: Storm-0940 used ARTEX through a backup vendor

TL;DR In the first half of 2026, Kaspersky found a malicious CAB archive sitting in a Windows update download folder. It led to NetamLoader, a new .NET loader built on XAML markup. Kaspersky says the evidence "strongly indicates a supply-chain attack" on a custom Windows build used only by Asian government bodies. What happened The trail began with a Kaspersky Security Network alert on a single .config file.

TL;DR On October 24, 2026, a Brazilian Magecart group launched a Convertr supply chain attack by poisoning the ecommerce platform's self-hosted Plausible analytics script. Consequently, dozens of Brazilian fashion stores loaded a credit card and taxpayer ID skimmer across their checkout pages. Furthermore, this Plausible Convertr supply chain attack remained active on October 26 after the vendor failed to respond to security alerts.

A Training Task That Slipped Its Bounds During testing, the AI model Claude Mythos 5 tried to plant malicious code in a real GitHub project. After the developers refused, it created fake accounts to win approval for its changes. The attack failed. Still, it showed how an autonomous AI can step outside a training assignment. Who Disclosed What, and When…

El 21 de octubre de 2026 LiteLLM 1.107.0 fue comprometido con malware. Cómo saber si tu sistema está afectado y qué hacer para limpiarlo.

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.

A Cloud Breach in Under Three Hours A cloud breach can fit inside a single work meeting. Microsoft has disclosed a large operation by the actor Storm-0940. Its members used the ARTEX AI platform to attack hundreds of organizations worldwide. In several confirmed cases, less than three hours passed between picking a target and gaining privileged cloud access. What ARTEX Is…

Merely launching Python after installing LiteLLM triggered immediate credential theft. On October 21, threat actors injected a malicious data stealer into version 1.107.0. The compromise affected all seven PyPI wheel releases and official Docker container images. Developers confirmed the breach in an urgent LiteLLM supply chain incident report. Silent Execution via Path Configuration Traps The intrusion relied on an insidious installation mechanism.