#software supply chain

All articles tagged with "software supply chain"

Backdoored Red Hat NPM packages show how fast supply-chain attacks spread

Attackers used an official Red Hat NPM channel to distribute malware that steals credentials and republishes infected packages through other accounts.

Key Takeaways

Attackers compromised an official Red Hat NPM namespace.
Affected packages executed malicious code during installation.

DT Editorial Team·Jun 2, 2026·via arstechnica.com

OpenAI details limited fallout from TanStack supply-chain attack and orders macOS app updates

OpenAI says a broader compromise of the TanStack npm ecosystem affected two employee devices, triggered credential rotation and deployment restrictions, and now requires macOS users to update OpenAI apps by June 12, 2026

Key Takeaways

OpenAI says two employee devices were impacted by the TanStack npm compromise.
The company reported limited credential exfiltration from a small set of internal repositories.

DT Editorial Team·May 14, 2026·via openai.com

Malware Disguised as an OpenAI Release Reached Hugging Face Users

A malicious repository hosted on Hugging Face reportedly posed as an OpenAI release, spreading infostealer malware to Windows systems before it was removed.

Key Takeaways

A malicious Hugging Face repository reportedly posed as an OpenAI release.
The supplied excerpt says it delivered infostealer malware to Windows machines.

DT Editorial Team·May 12, 2026·via artificialintelligence-news.com

OpenAI Rotates macOS Signing Certificates After Axios Supply-Chain Incident

OpenAI says a compromised third-party developer library touched part of its macOS app-signing workflow, prompting certificate rotation, fresh app builds, and mandatory client updates.

DT Editorial Team·Apr 12, 2026·via openai.com