Flurry of Supply-Chain Software Library Attacks
· Source: bankinfosecurity.com
In short
A wave of supply-chain attacks has targeted widely used open-source software libraries, including LiteLLM, Axios, Xinference, KICS, and Bitwarden CLI, with attackers injecting data-stealing malware and self-replicating worms into code repositories. Cybersecurity experts warn that automated CI/CD pipelines silently merge malicious updates within minutes, often before the threats are detected. The NCSC's CTO highlights the fragility of modern software development practices and advises organizations to scrutinize code integrity and consider delaying automatic updates.
Read Original Article — Read the full article on the publisher’s site.
Tags: supply-chain, software security, open-source, cyberattack, CI/CD, credential theft