Category · 14 articles
Supply Chain
Supply Chain articles from the Axeploit team: attack chains, detection guidance, and practitioner deep dives.

Supply Chain
10 min read
Same Extension ID, Different Code: What Actually Installs When Your Team Moves to Cursor

Supply Chain
11 min read
GitSpawn: The Git Performance Flag That Turns Coding Agents Into Command Runners

Supply Chain
11 min read
One Laptop, 469 Credential Hiding Spots: What the New Shai-Hulud Worm Is Really After

Supply Chain
14 min read
An Agent Swarm That Takes Over the Internet Needs Four Capabilities. July's Sandbox Escape Proved One.
Keep reading
More articles

Patching Elementor Pro Doesn't Remove the Webshell. Here's How to Check
supply chain

Your Coding Agent Installed 23 Packages in a Minute. Your SBOM Saw Zero.
supply chain

An AI Found a 20-Year-Old RCE in One Evening, and the Game Is the Least Interesting Part
supply chain

AliExpress Didn't Beam Ultrasonic Sound at Shoppers. What It Actually Did Is Harder to Block
supply chain

The First Hour of an npm Supply-Chain Alert: Three Questions, One Right Order
supply chain

RedC2 4.0 on npm: Detecting the Import-Time Linux Backdoor Behind 14 Trojanized Packages
supply chain

The Miasma Worm: Anatomy of the Binding.gyp npm Supply Chain Attack
supply chain

The Mini Shai-Hulud Supply Chain Attack on AntV: A Deep Dive for Security Engineers
supply chain

The Dark Side of Open Source: Spotting Malicious NPM and PyPI Packages
supply chain
