 | JADEPUFFER Agentic Ransomware Targeting Cloud Environments (Campaign) | 2026-09-26 | 78 | [email protected] (Wiz Threat Research) | True | | |
| Coder Module Registry Compromise Leads to Credential-Stealing Malware Distribution (Incident) | 2026-09-01 | 80 | [email protected] (Wiz Threat Research) | True | | |
| JetBrains Cadence Compromised via Exploitation of TeamCity Vulnerability (Incident) | 2026-09-01 | 88 | [email protected] (Wiz Threat Research) | True | | |
| @7nohe/openapi-react-query-codegen Compromised in Supply Chain Attack (Campaign) | 2026-08-28 | 85 | [email protected] (Wiz Threat Research) | True | | |
| arrayref and Other Rust Crates Hijacked in Supply Chain Attack (Campaign) | 2026-08-20 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Payroll Pirates Phishing Campaign Targets Microsoft 365 Financial Workflows (Campaign) | 2026-08-07 | 75 | [email protected] (Wiz Threat Research) | True | | |
| keyv and cacheable npm Package Hijacked in Supply Chain Attack (Campaign) | 2026-08-04 | 90 | [email protected] (Wiz Threat Research) | True | | |
| CaptiveCrunch: Midnight Blizzard Hospitality Network AiTM Campaign (Campaign) | 2026-07-31 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Cl0p Exploitation of PTC Windchill and FlexPLM Vulnerability (Campaign) | 2026-07-22 | 78 | [email protected] (Wiz Threat Research) | True | | |
| SleeperGem: RubyGems Supply Chain Attack Targets Dormant Maintainer Accounts (Campaign) | 2026-07-19 | 78 | [email protected] (Wiz Threat Research) | True | | |
| NadMesh: Autonomous AI-Focused Botnet Targeting Cloud and AI Infrastructure (Campaign) | 2026-07-17 | 78 | [email protected] (Wiz Threat Research) | True | | |
| CVE-2025-54068 Exploited in Large-Scale Laravel Livewire Credential Theft Campaign (Campaign) | 2026-07-16 | 75 | [email protected] (Wiz Threat Research) | True | | |
| Cryptomining campaign targeting Linux SSH servers (Campaign) | 2026-07-12 | 65 | [email protected] (Wiz Threat Research) | True | | |
| Jscrambler npm Package Compromised in Supply Chain Attack (Campaign) | 2026-07-11 | 88 | [email protected] (Wiz Threat Research) | True | | |
| Compromised Injective SDK npm Package Exfiltrates Cryptocurrency Wallet Keys (Campaign) | 2026-07-09 | 78 | [email protected] (Wiz Threat Research) | True | | |
| Coordinated GitHub API Enumeration and Access Token Abuse (Campaign) | 2026-07-08 | 70 | [email protected] (Wiz Threat Research) | True | | |
| Cryptojacking Campaign Targeting K8s Clusters (Campaign) | 2026-06-25 | 75 | [email protected] (Wiz Threat Research) | True | | |
| Klue Supply Chain Breach Leads to Salesforce Data Exfiltration (Incident) | 2026-06-18 | 80 | [email protected] (Wiz Threat Research) | True | | |
| Mastra Packages Trojanized with Malicious Dependency (Campaign) | 2026-06-17 | 88 | [email protected] (Wiz Threat Research) | True | | |
| FortiBleed: Credential Compromise Campaign Targeting Fortinet Devices (Campaign) | 2026-06-16 | 70 | [email protected] (Wiz Threat Research) | True | | |
| Atomic Arch: AUR Package Supply Chain Compromise Using Malicious npm Package (Campaign) | 2026-06-12 | 88 | [email protected] (Wiz Threat Research) | True | | |
| ServiceNow Unauthenticated Access Incident (Incident) | 2026-06-09 | 78 | [email protected] (Wiz Threat Research) | True | | |
| TeamPCP adds Malware to Multiple Microsoft-Linked GitHub Projects (Campaign) | 2026-06-05 | 75 | [email protected] (Wiz Threat Research) | True | | |
| Binding.gyp Supply Chain Attack Enables CI/CD Worm Propagation Across npm Packages (Campaign) | 2026-06-04 | 85 | [email protected] (Wiz Threat Research) | True | | |
| Miasma: Supply Chain Compromise in RedHat npm Packages (Campaign) | 2026-06-01 | 85 | [email protected] (Wiz Threat Research) | True | | |
| JINX-0164 Targeting Cryptocurrency Development Infrastructure (Campaign) | 2026-05-27 | 78 | [email protected] (Wiz Threat Research) | True | | |
| Supply Chain Campaign Targeting Composer and GitHub Repositories (Campaign) | 2026-05-24 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Megalodon Campaign Backdoors GitHub Repositories via CI Workflow Compromise (Campaign) | 2026-05-22 | 88 | [email protected] (Wiz Threat Research) | True | | |
| TeamPCP Claims Breach of Internal GitHub Repositories (Incident) | 2026-05-20 | 65 | [email protected] (Wiz Threat Research) | True | | |
| New Mini-Shai-Hulud Wave Targets NPM, PyPi Packages and VSCode Extension (Campaign) | 2026-05-18 | 88 | [email protected] (Wiz Threat Research) | True | | |
| node-ipc npm Distribution Compromised (Campaign) | 2026-05-14 | 80 | [email protected] (Wiz Threat Research) | True | | |
| Tanstack and other Packages Compromised in Supply Chain Attack (Campaign) | 2026-05-11 | 92 | [email protected] (Wiz Threat Research) | True | | |
| DDoS Botnet Leveraging Jenkins Misconfigurations for Initial Access (Campaign) | 2026-05-10 | 70 | [email protected] (Wiz Threat Research) | True | | |
| Compromise of Checkmarx Jenkins AST Plugin by TeamPCP (Campaign) | 2026-05-09 | 85 | [email protected] (Wiz Threat Research) | True | | |
| Lightning and Intercom Packages Compromised in Supply Chain Attack (Campaign) | 2026-04-30 | 85 | [email protected] (Wiz Threat Research) | True | | |
| Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware (Campaign) | 2026-04-29 | 85 | [email protected] (Wiz Threat Research) | True | | |
| Critical SQL Injection Vulnerability in LiteLLM Exploited in-the-Wild (Campaign) | 2026-04-27 | 85 | [email protected] (Wiz Threat Research) | True | | |
| Elementary Data Compromised in Supply Chain Attack (Campaign) | 2026-04-23 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Xinference Compromised in Supply Chain Attack (Campaign) | 2026-04-22 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Checkmarx KICS and Bitwarden CLI Compromised in Fresh Supply Chain Attack (Campaign) | 2026-04-22 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Context.ai OAuth Token Compromise (Incident) | 2026-04-20 | 70 | [email protected] (Wiz Threat Research) | True | | |
| PolinRider Campaign: DPRK-Linked Supply Chain Attack Infects GitHub Repositories (Campaign) | 2026-04-09 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Stolen SaaS Integration Tokens Enable Data Theft Across Snowflake Environments (Campaign) | 2026-04-07 | 75 | [email protected] (Wiz Threat Research) | True | | |
| O365 Device Code Phishing Campaign using EvilTokens and Abusing Railway Platform (Campaign) | 2026-04-07 | 70 | [email protected] (Wiz Threat Research) | True | | |
| Exploitation Campaign of Vulnerable GitHub Workflows (Campaign) | 2026-04-06 | 75 | [email protected] (Wiz Threat Research) | True | | |
| UAT-10608 Campaign Abuses React2Shell for Cloud Credential Harvesting (Campaign) | 2026-04-02 | 88 | [email protected] (Wiz Threat Research) | True | | |
| Axios supply chain attack (Incident) | 2026-03-31 | 90 | [email protected] (Wiz Threat Research) | True | | |
| Apifox supply chain attack (Incident) | 2026-03-26 | 30 | [email protected] (Wiz Threat Research) | True | | |
| BuddyBoss supply chain attack (Incident) | 2026-03-25 | 88 | [email protected] (Wiz Threat Research) | True | | |
| LiteLLM supply chain attack (Incident) | 2026-03-24 | 60 | [email protected] (Wiz Threat Research) | True | | |
