It's not such a happy Monday for defenders wiping the sleep from their eyes only to deal with the latest supply chain attack.

The Megalodon supply chain attack poisoned over 5,500 GitHub repositories via automated commits injecting GitHub Actions workflows.

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.

Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.

Sometime around the last week of May 2026, attackers uploaded poisoned packages to three of the most widely used software ...

In particular, tariffs and related trade fights can inject extreme uncertainty, complexity, and volatility into already fragile supply chain networks, with impacts extending well into the future. In ...

Aldi is the grocery store that's not like the other grocery stores. How do they do it? Well, the answers lie in the company's highly efficient and meticulously managed supply chain. If you're a ...

The recent Shai Hulud 2.0 incident was initially described as an “npm worm” and a “GitHub repository attack.” That framing missed the point. When you look at what actually left victims' environments, ...

In today’s fast fashion world, costs constantly plague companies struggling to improve margins, but it’s the potential supply chain disruptions that keep sourcing executives wide-eyed after hours. In ...

Dallas-based o9 Solutions, a supply chain artificial intelligence firm, has filed a lawsuit against SAP and three former executives, claiming they conducted a coordinated scheme to steal trade secrets ...