The attackers used a compromised BigCommerce application key held by Ribon to access customer data.

The post BigCommerce Data Stolen via Ribon Apps Hack appeared first on SecurityWeek.

Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.

The post Malicious B-tree NPM Package Accumulates Millions of Downloads appeared first on SecurityWeek.

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea.

The post Rust Team Members and Popular Crate Owners Targeted via Video Calls appeared first on SecurityWeek.

The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack.

The post CrowdSec Confirms Source Code Stolen in Supply Chain Attack appeared first on SecurityWeek.

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek.

Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.

The post Rust Supply Chain Attack Linked to North Korean Hackers appeared first on SecurityWeek.