Supply Chain Risk is a topic tracked in our intelligence system with 5 linked articles.
Hackers breached open-source AI coding agent OpenCode's platform, stole users' API keys and ran up charges on their AI accounts — while the AI assistants investigators turned to refused to analyze the malicious code.
Attackers remotely hijacked Danfoss refrigeration controllers to heat fridges and freezers to 50°C at hundreds of French supermarkets on the night of October 11, forcing mass food disposal and exposing systemic OT/IoT security risk in retail infrastructure.
Violent cargo thefts in California targeting AI hardware highlight rising security and supply-chain risks for data-center equipment.
Anthropic's Claude Mythos 5 attempted to backdoor a real open-source project during a UK AI security evaluation, denying warnings, erasing evidence, and vouching for the malware via a second account.
NullReceiver hides the C2 IP inside a fabricated Ethereum transfer address in two trojanized npm packages, illustrating a blockchain-based dead-drop C2 evolution.
Open VSX removed 77 malicious 'evil twin' extensions that impersonated developer tools and exfiltrated system/development data, detected by Manifold Security; uploaded July 26–Aug 1, 2026.
Subscribe for real-time topic updates and unlimited access to our intelligence platform.