 | Payroll Pirates Phishing Campaign Targets Microsoft 365 Financial Workflows (Campaign) | 2026-08-07 | True | [email protected] (Wiz Threat Research) | True | | |
| keyv and cacheable npm Package Hijacked in Supply Chain Attack (Campaign) | 2026-08-04 | True | [email protected] (Wiz Threat Research) | True | | |
| CaptiveCrunch: Midnight Blizzard Hospitality Network AiTM Campaign (Campaign) | 2026-07-31 | True | [email protected] (Wiz Threat Research) | True | | |
| Cl0p Exploitation of PTC Windchill and FlexPLM Vulnerability (Campaign) | 2026-07-22 | True | [email protected] (Wiz Threat Research) | True | | |
| SleeperGem: RubyGems Supply Chain Attack Targets Dormant Maintainer Accounts (Campaign) | 2026-07-19 | True | [email protected] (Wiz Threat Research) | True | | |
| NadMesh: Autonomous AI-Focused Botnet Targeting Cloud and AI Infrastructure (Campaign) | 2026-07-17 | True | [email protected] (Wiz Threat Research) | True | | |
| CVE-2025-54068 Exploited in Large-Scale Laravel Livewire Credential Theft Campaign (Campaign) | 2026-07-16 | True | [email protected] (Wiz Threat Research) | True | | |
| Cryptomining campaign targeting Linux SSH servers (Campaign) | 2026-07-12 | True | [email protected] (Wiz Threat Research) | True | | |
| Jscrambler npm Package Compromised in Supply Chain Attack (Campaign) | 2026-07-11 | True | [email protected] (Wiz Threat Research) | True | | |
| Compromised Injective SDK npm Package Exfiltrates Cryptocurrency Wallet Keys (Campaign) | 2026-07-09 | True | [email protected] (Wiz Threat Research) | True | | |
| Coordinated GitHub API Enumeration and Access Token Abuse (Campaign) | 2026-07-08 | True | [email protected] (Wiz Threat Research) | True | | |
| Cryptojacking Campaign Targeting K8s Clusters (Campaign) | 2026-06-25 | True | [email protected] (Wiz Threat Research) | True | | |
| Klue Supply Chain Breach Leads to Salesforce Data Exfiltration (Incident) | 2026-06-18 | True | [email protected] (Wiz Threat Research) | True | | |
| Mastra Packages Trojanized with Malicious Dependency (Campaign) | 2026-06-17 | True | [email protected] (Wiz Threat Research) | True | | |
| FortiBleed: Credential Compromise Campaign Targeting Fortinet Devices (Campaign) | 2026-06-16 | True | [email protected] (Wiz Threat Research) | True | | |
| Atomic Arch: AUR Package Supply Chain Compromise Using Malicious npm Package (Campaign) | 2026-06-12 | True | [email protected] (Wiz Threat Research) | True | | |
| ServiceNow Unauthenticated Access Incident (Incident) | 2026-06-09 | True | [email protected] (Wiz Threat Research) | True | | |
| TeamPCP adds Malware to Multiple Microsoft-Linked GitHub Projects (Campaign) | 2026-06-05 | True | [email protected] (Wiz Threat Research) | True | | |
| Binding.gyp Supply Chain Attack Enables CI/CD Worm Propagation Across npm Packages (Campaign) | 2026-06-04 | True | [email protected] (Wiz Threat Research) | True | | |
| Miasma: Supply Chain Compromise in RedHat npm Packages (Campaign) | 2026-06-01 | True | [email protected] (Wiz Threat Research) | True | | |
| JINX-0164 Targeting Cryptocurrency Development Infrastructure (Campaign) | 2026-05-27 | True | [email protected] (Wiz Threat Research) | True | | |
| Supply Chain Campaign Targeting Composer and GitHub Repositories (Campaign) | 2026-05-24 | True | [email protected] (Wiz Threat Research) | True | | |
| Megalodon Campaign Backdoors GitHub Repositories via CI Workflow Compromise (Campaign) | 2026-05-22 | True | [email protected] (Wiz Threat Research) | True | | |
| TeamPCP Claims Breach of Internal GitHub Repositories (Incident) | 2026-05-20 | True | [email protected] (Wiz Threat Research) | True | | |
| New Mini-Shai-Hulud Wave Targets NPM, PyPi Packages and VSCode Extension (Campaign) | 2026-05-18 | True | [email protected] (Wiz Threat Research) | True | | |
| node-ipc npm Distribution Compromised (Campaign) | 2026-05-14 | True | [email protected] (Wiz Threat Research) | True | | |
| Tanstack and other Packages Compromised in Supply Chain Attack (Campaign) | 2026-05-11 | True | [email protected] (Wiz Threat Research) | True | | |
| DDoS Botnet Leveraging Jenkins Misconfigurations for Initial Access (Campaign) | 2026-05-10 | True | [email protected] (Wiz Threat Research) | True | | |
| Compromise of Checkmarx Jenkins AST Plugin by TeamPCP (Campaign) | 2026-05-09 | True | [email protected] (Wiz Threat Research) | True | | |
| Lightning and Intercom Packages Compromised in Supply Chain Attack (Campaign) | 2026-04-30 | True | [email protected] (Wiz Threat Research) | True | | |
| Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware (Campaign) | 2026-04-29 | True | [email protected] (Wiz Threat Research) | True | | |
| Critical SQL Injection Vulnerability in LiteLLM Exploited in-the-Wild (Campaign) | 2026-04-27 | True | [email protected] (Wiz Threat Research) | True | | |
| Elementary Data Compromised in Supply Chain Attack (Campaign) | 2026-04-23 | True | [email protected] (Wiz Threat Research) | True | | |
| Xinference Compromised in Supply Chain Attack (Campaign) | 2026-04-22 | True | [email protected] (Wiz Threat Research) | True | | |
| Checkmarx KICS and Bitwarden CLI Compromised in Fresh Supply Chain Attack (Campaign) | 2026-04-22 | True | [email protected] (Wiz Threat Research) | True | | |
| PolinRider Campaign: DPRK-Linked Supply Chain Attack Infects GitHub Repositories (Campaign) | 2026-04-09 | True | [email protected] (Wiz Threat Research) | True | | |
| Stolen SaaS Integration Tokens Enable Data Theft Across Snowflake Environments (Campaign) | 2026-04-07 | True | [email protected] (Wiz Threat Research) | True | | |
| UAT-10608 Campaign Abuses React2Shell for Cloud Credential Harvesting (Campaign) | 2026-04-02 | True | [email protected] (Wiz Threat Research) | True | | |
| Axios supply chain attack (Incident) | 2026-03-31 | True | [email protected] (Wiz Threat Research) | True | | |
| Apifox supply chain attack (Incident) | 2026-03-26 | True | [email protected] (Wiz Threat Research) | True | | |
| BuddyBoss supply chain attack (Incident) | 2026-03-25 | True | [email protected] (Wiz Threat Research) | True | | |
| LiteLLM supply chain attack (Incident) | 2026-03-24 | True | [email protected] (Wiz Threat Research) | True | | |
| Exploitation of S1ngularity-exposed cloud keys for lateral movement (Incident) | 2026-03-11 | True | [email protected] (Wiz Threat Research) | True | | |
| xygeni-action repository hijack (Incident) | 2026-03-09 | True | [email protected] (Wiz Threat Research) | True | | |
| PolinRider supply chain attack (Incident) | 2026-03-08 | True | [email protected] (Wiz Threat Research) | True | | |
| Trivy supply chain attack (Incident) | 2026-03-01 | True | [email protected] (Wiz Threat Research) | True | | |
| SANDWORM_MODE: Typosquatted npm Packages Used to Hijack CI Workflows (Campaign) | 2026-02-20 | True | [email protected] (Wiz Threat Research) | True | | |
| TeamPCP Cloud-Native Campaign Targeting Exposed Control Planes (Campaign) | 2026-02-05 | True | [email protected] (Wiz Threat Research) | True | | |
| Supply-Chain Hijacking of Notepad++ Updates via Hosting Provider Compromise (Campaign) | 2026-02-02 | True | [email protected] (Wiz Threat Research) | True | | |
| Supply-Chain Attack via Force Pushes on Plone GitHub Repositories (Campaign) | 2026-01-31 | True | [email protected] (Wiz Threat Research) | True | | |
