SUPPLY CHAIN

A tampered Anthropic.claude-code 2.1.312 and 2.1.313 hit the Cursor Marketplace on October 29. The one-line check, what the payload does, and what to change.

LiteLLM 1.107.0 on PyPI shipped a credential stealer and a backdoor for under two hours on October 21. How to check if you ran it, what to clean first, and what to rotate.

Ray CVE-2025-62593 was exploited by the RondoDox botnet before disclosure, then added to CISA KEV. How to check if your Ray setup is exposed and harden it.

arrayref 0.3.10 was compromised to pull in a proc-macro1 typosquat whose build script ran a remote binary. What happened and why coding agents walk into it.

GitHub malware advisories now cover eight package ecosystems, adding PyPI, Maven, Go, crates.io and more to npm by ingesting OpenSSF malicious-packages data.

A Hanwha Vision camera shipped a GitHub admin token in its login page because a Vite build leaked process.env. How it happened and what to fix in your CI.

Perplexity Bumblebee: an open source, read-only Go scanner that checks packages, editor extensions and MCP configs against exposure catalogs, with setup steps.

Mastra npm supply chain attack: 140+ @mastra packages were backdoored with a credential-stealing trojan. How to check your lockfile and what to do if affected.

The TanStack npm incident was not just a package-security story. It was a reminder that AI agent workflows inherit every weak trust boundary in CI.