AI Supply Chain and AI SBOM

Why It Matters

An AI SBOM that lists models, vendors, datasets, plugins and dependencies shows which of these issues reach your systems.

Relevant Frameworks

Incidents and Analysis

• GitHub Launches npm Firewall to Block Malicious Packages Before Installation 2026-10-29 · thehackernews.com
  Malicious package installation
• Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover 2026-10-27 · securityweek.com
  Untrusted software update leading to privileged remote code execution
• Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline 2026-10-24 · thehackernews.com
  Exposed credential abuse and malicious package publication
• AI’s Weakest Link: Securing the Supply Chain Nobody Sees 2026-10-23 · BusinessToday
  Backdoored dependency enabling credential and secret exfiltration
• AI Software Supply Chain Risks After the Hugging Face Incident 2026-10-23 · International Business Times
  AI agent abuse through an AI supply-chain path
• AI’s Weakest Link: Securing the Supply Chain Nobody Sees 2026-10-23 · RealGround
  Backdoored software release and supply-chain compromise
• AI’s Weakest Link: Securing the Supply Chain Nobody Sees 2026-10-23 · BusinessToday
  AI software supply-chain compromise
• AI framework vulnerabilities and model supply chain risk 2026-10-23 · SC World
  malicious fine-tuning-data injection
• Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image 2026-10-23 · thehackernews.com
  Command execution via crafted image and unsafe filename handling
• Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data 2026-10-23 · thehackernews.com
  Remote code execution through crafted Brotli data
• LiteLLM Compromised in Fresh Supply Chain Attack 2026-10-23 · securityweek.com
  AI supply-chain compromise using compromised OAuth tokens
• OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL 2026-10-22 · thehackernews.com
  MCP server-supplied command injection during OAuth sign-in
• eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable 2026-10-22 · thehackernews.com
  Guessable private key recovery
• LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release 2026-10-22 · thehackernews.com
  Malicious package release through compromised software supply chain
• AI Model and Package Supply-Chain Risks Include Malicious Model Files 2026-10-21 · AIsecWatch
  Malicious model files and insecure model serialization
• LiteLLM Python Package Compromised in Software Supply Chain Attack 2026-10-21 · The Hacker News
  Software supply chain compromise
• LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor 2026-10-21 · thehackernews.com
  Software supply chain compromise
• U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases 2026-10-21 · thehackernews.com
  AI supply-chain dependency exposure
• Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns 2026-10-20 · thehackernews.com
  Certificate authority key compromise or trust-chain blocking
• AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign 2026-10-20 · securityweek.com
  Software supply-chain compromise
• Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware 2026-10-20 · thehackernews.com
  Compromised contributor account and malicious release artifact replacement
• Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic 2026-10-19 · thehackernews.com
  Malicious npm package and AI agent traffic interception
• GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories 2026-10-19 · thehackernews.com
  Software supply-chain compromise and credential-stealing malware delivery
• Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor 2026-10-19 · thehackernews.com
  Malicious software supply-chain compromise
• Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw 2026-10-19 · securityweek.com
  Remote code execution through module interaction
• Anthropic Acquires Confidential AI Startup Opaque Systems 2026-10-19 · securityweek.com
• AI Decision Models and Their Impact on AI SOC Platforms 2026-10-16 · thehackernews.com
  No vulnerability reported; new AI model and adapter supply-chain components
• Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts 2026-10-15 · thehackernews.com
  Authenticated remote code execution in an AI workflow platform
• AI Security Incidents Involving Poisoned LiteLLM Releases 2026-10-12 · The Hacker News
  Poisoned AI dependency releases
• Your AI Agent Is Only as Safe as the Packages It Downloads 2026-10-12 · CyberScoop
  Agent supply-chain risks
• Study Finds Continued Use of AI Models Flagged for Arbitrary Code Execution 2026-10-12 · arXiv
  Unsafe model file formats in the AI supply chain
• Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely 2026-10-07 · thehackernews.com
  Unauthenticated remote code execution in LLM serving infrastructure
• Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers 2026-10-06 · thehackernews.com
  Insecure public MCP servers
• Hugging Face AI supply-chain incident involving a malicious dataset 2026-10-05 · The Hacker News
  Malicious dataset leading to code execution
• AI Security — Latest News, Reports & Analysis 2026-10-05 · The Hacker News
  Unauthenticated control of a local model server from a web page
• Supply Chain Security — Latest News, Reports & Analysis 2026-10-05 · The Hacker News
  Crafted model repositories; MCP secret exposure
• GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers 2026-10-02 · thehackernews.com
  Command execution on the AI gateway by an authenticated user
• ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories 2026-10-01 · thehackernews.com
  Multiple, including model inspection RCE
• Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials 2026-09-29 · thehackernews.com
  OAuth credential theft by a malicious MCP server
• Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI 2026-09-23 · thehackernews.com
  Compromised AI agent plugin packages
• Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials 2026-09-22 · thehackernews.com
  Unauthenticated RCE in an AI gateway
• AI Security — Latest News, Reports & Analysis 2026-09-21 · The Hacker News
  Unauthenticated local model control; MCP command injection via crafted notebooks
• Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents 2026-09-18 · thehackernews.com
  Plugin substitution in AI coding agents
• Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation 2026-09-18 · thehackernews.com
  Missing authentication in an AI platform
• Microsoft Patches 18 Vulnerabilities in AI, Cloud Products 2026-09-18 · securityweek.com
  Cloud and AI service vulnerabilities
• Qwen coding agent rewrites its own model, leaks secrets, and drops safety checks 2026-09-17 · Softonic / Irregular Security Experiment
  Agent retraining its own model and leaking secrets
• AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals 2026-09-17 · securityweek.com
  Agents retraining their own models
• Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories 2026-09-16 · thehackernews.com
  Hijacked AI coding assistant recommending poisoned packages
• OpenAI Investigates Report Linking AI Agents to RubyGems Attack 2026-09-15 · securityweek.com
  Suspected AI agent supply-chain activity
• OpenAI agents flood RubyGems with malicious packages and attempt credential theft 2026-09-12 · Cybersecurity News
  AI agents mass-publishing malicious packages and abusing documentation builders
• AI agents being tested by OpenAI involved in cyber-attack on RubyGems and Hugging Face 2026-09-12 · The Guardian
  AI agents conducting supply-chain attacks and credential theft
• The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet 2026-09-11 · Security Affairs
  Exposed AI workflow components
• Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code 2026-09-02 · thehackernews.com
  Malicious .git configuration triggering command execution
• Hackers Start Exploiting Critical Langflow Vulnerability 2026-09-01 · securityweek.com
  Unauthenticated code execution in an AI workflow builder
• Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity 2026-09-01 · thehackernews.com
  Exploitation of AI workflow and web frameworks
• Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says 2026-08-28 · securityweek.com
  Hidden model lineage
• AIR Security found malicious servers in the official MCP registry 2026-08-27 · The Injection
  MCP server hijacking via expired domain re-registration
• Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode 2026-08-25 · thehackernews.com
  Malicious notebook triggering MCP command execution
• A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw 2026-08-25 · thehackernews.com
  Unauthenticated control of a local model server from a webpage
• AI package supply‑chain breach exposes terabytes of user credentials 2026-08-22 · Emergent.sh
  Compromised AI package pipeline
• MLflow Vulnerability Exploited for Cloud Credential Theft 2026-08-20 · securityweek.com
  SSRF in an ML platform
• Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets 2026-08-18 · thehackernews.com
  SSRF in an AI/ML platform
• CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE 2026-08-18 · thehackernews.com
  RCE in AI compute infrastructure
• Trivy, Not LiteLLM Behind the 2,500 Org Compromise 2026-08-14 · securityweek.com
  Chained supply chain compromise
• Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations 2026-08-12 · thehackernews.com
  Poisoned AI gateway releases
• Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack 2026-08-12 · securityweek.com
  AI library supply chain compromise
• LiteLLM Supply Chain Attack: 2500+ Companies Exposed 2026-08-11 · CloudSEK
  Malicious releases via stolen publishing tokens
• AI Incidents Database 2026-08-11 · Guardion AI
  Multiple AI incidents (database)
• Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets 2026-08-11 · thehackernews.com
  Fragmented instructions from a malicious MCP server
• ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors 2026-08-10 · thehackernews.com
  Multiple, including MCP supply chain attacks
• Trojanized AI skills gain 1.7M installs in agent-targeted attack 2026-08-08 · CSO Online
  Trojanized AI agent skills
• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer 2026-08-08 · thehackernews.com
  Slopsquatting and typosquatting
• AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory 2026-08-06 · thehackernews.com
  Recommendation poisoning via pre-filled assistant deep links
• Critical Paperclip Flaw Allowed Admin Access, Code Execution 2026-08-06 · securityweek.com
  Self-registration to privileged API access and code execution
• Prompt injection isn't the bug, AI agent frameworks are 2026-08-05 · The Register
  Framework flaws exposing agent state to untrusted content, including insecure deserialization
• Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports 2026-08-05 · thehackernews.com
  Malicious agent import leading to host command execution
• CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited 2026-08-05 · thehackernews.com
  Exploited vulnerabilities including AI workflow RCE
• Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself 2026-08-05 · thehackernews.com
  Agent attempting supply-chain backdoor with deception
• CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities 2026-08-05 · securityweek.com
  Exploited vulnerabilities including AI workflow RCE
• Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks 2026-08-04 · thehackernews.com
  npm worm abusing AI coding agent hooks
• Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code 2026-08-03 · thehackernews.com
  Malicious model repositories bypassing trust_remote_code
• Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms 2026-07-30 · securityweek.com
  Unauthenticated command execution in an MCP bridge
• Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory 2026-07-29 · thehackernews.com
  Unauthenticated RCE and memory poisoning in an agent harness
• ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More 2026-07-27 · thehackernews.com
  Multiple, including slopsquatting (packages named after AI-hallucinated names)
• AI supply-chain risk report described a malicious LiteLLM package on PyPI 2026-07-21 · KodeKloud
  Poisoned AI gateway dependency
• Hugging Face Dataset Hack Exposes AI Supply Chain Weakness 2026-07-21 · Rafter Labs via LinkedIn
  Malicious dataset leading to code execution and lateral movement
• The AI Wire | AI Security Incident News Feed 2026-07-21 · Agentic Threat Tracker / The AI Wire
  Framework flaws (deserialization, SSRF, path traversal, SQL injection) reachable via prompt injection
• Hugging Face's Autonomous AI Agent Breach 2026-07-20 · Cloud Security Alliance Labs
  Malicious dataset triggering code execution, followed by autonomous lateral movement
• Hugging Face warns an autonomous AI agent hacked its production infrastructure 2026-07-20 · BleepingComputer
  Template injection and remote-code dataset loader exploitation
• Hugging Face warns an autonomous AI agent hacked its network 2026-07-20 · BleepingComputer
  Malicious dataset triggering code execution
• ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More 2026-07-20 · thehackernews.com
  Multiple, including attacks on AI services
• FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware 2026-07-20 · thehackernews.com
  Fake AI skills and MCP servers
• World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent 2026-07-20 · thehackernews.com
  Autonomous agent intrusion
• New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 2026-07-17 · thehackernews.com
  Scanning exposed AI services for credentials
• 7,000 Langflow Servers Under Active Attack; LangGraph and LangChain Share Exploited Vulnerabilities 2026-07-15 · VentureBeat
  Exploitation of LLM application frameworks
• Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution 2026-07-15 · thehackernews.com
  Malicious repository triggering code execution in an AI IDE
• Unpatched Cursor Vulnerability Exposes Users to Code Execution 2026-07-15 · securityweek.com
  Binary planting in a repository root
• New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email 2026-07-13 · thehackernews.com
  Persistent memory poisoning via email
• The AI Supply Chain Has a Supply Chain Problem 2026-07-10 · Semgrep
  Training data poisoning and AI component tampering
• Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images 2026-07-09 · thehackernews.com
  Unauthorized or insufficiently governed reuse of public content for AI generation
• CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws 2026-07-08 · securityweek.com
  Exploited vulnerabilities including AI workflow RCE
• CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV 2026-07-08 · thehackernews.com
  Exploited vulnerabilities including AI workflow RCE
• What Changes When Your Software Supply Chain Includes AI Writing Your Code? 2026-07-07 · thehackernews.com
  AI in the build pipeline
• SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing 2026-07-06 · thehackernews.com
  Evasion of AI skill scanners
• How to Conduct a Successful Audit of AI-Driven Software Development 2026-07-02 · securityweek.com
  AI-generated code governance
• Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints 2026-06-30 · thehackernews.com
  AI workflow RCE for crypto mining
• Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data 2026-06-30 · thehackernews.com
  Poisoned MCP tool descriptions
• Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs 2026-06-26 · thehackernews.com
  Malicious repository MCP configuration
• Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories 2026-06-26 · securityweek.com
  Malicious repository leading to credential theft
• New Enterprise-Ready MCP Specification Brings New Security Challenges 2026-06-26 · securityweek.com
  Not applicable (specification change)
• Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk 2026-06-24 · securityweek.com
  Supply chain vulnerability triage
• Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents 2026-06-23 · thehackernews.com
  Malicious agent skills distributed through a marketplace
• North Korean Hackers Blamed for Mastra NPM Supply Chain Attack 2026-06-22 · securityweek.com
  AI agent framework supply chain attack
• Atlassian, Splunk Patch Critical Vulnerabilities 2026-06-18 · securityweek.com
  Command injection in an AI toolkit
• Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting 2026-06-17 · thehackernews.com
  Model upload hijacking via bucket squatting
• 144 Mastra npm Packages Compromised via Hijacked Contributor Account 2026-06-17 · thehackernews.com
  AI framework package compromise
• LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers 2026-06-15 · thehackernews.com
  Privilege escalation in an AI gateway
• LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution 2026-06-12 · thehackernews.com
  SQL injection chain in an agent framework
• Hackers Exploit Langflow Vulnerability for Remote Code Execution 2026-06-11 · securityweek.com
  Arbitrary file write in an AI app builder
• Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE 2026-06-10 · thehackernews.com
  Unauthenticated file write to RCE
• LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE 2026-06-09 · thehackernews.com
  Command injection in an AI gateway
• Everybody Is Vibe Coding But Nobody Told the Security Team 2026-06-08 · securityweek.com
  Ungoverned AI-generated code
• OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack 2026-06-01 · thehackernews.com
  Malicious AI tool package stealing tokens
• Exploit Code Published for Critical Flowise RCE Vulnerability 2026-05-30 · securityweek.com
  Malicious chatflow import leading to code execution
• Securing the AI Supply Chain: What Can We Learn From Developer ... 2026-05-22 · arXiv
  AI supply-chain risk (research)
• CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV 2026-05-22 · thehackernews.com
  Exploited vulnerabilities including AI workflow builder
• Healthcare AI Platform Xsolis Reports Data Breach Affecting 1.4 Million Individuals 2026-05-10 · TechTarget HealthTechSecurity
  Third-party data breach at an AI vendor
• AI-Optimized npm Malware Targeting LLM Agents 2026-05-02 · Cloud Security Alliance
  Package documentation targeting AI agents
• AI Agents Are the New Exposure Point for MSPs and SMBs 2026-04-30 · Cybersecurity Insiders
  Exposed and over-privileged AI infrastructure
• AI-Powered Supply Chain Attacks: What SMBs Need to Know 2026-03-18 · Pivot Point Security
  AI-related vendor risk
• Twin cybersecurity incidents leave AI industry shaken 2026-03-04 · Yahoo Finance
  AI supply chain compromise and source leak
• Model Namespace Reuse: An AI Supply-Chain Attack Exploiting Major Cloud Platforms 2025-09-03 · Unit 42 (Palo Alto Networks)
  Model namespace hijacking
• Top 10 Security Concerns for AI-Powered Startups 2025-06-10 · Cyber Advisors
  Overview of AI startup risks
• NCSC and ENISA Publish Joint Guidance on Securing AI Supply Chains for European SMEs and SaaS Providers 2025-03-27 · UK NCSC / ENISA
  AI supply chain risk (guidance)
• Lasso Security Uncovers Critical Vulnerabilities in Hugging Face Repositories Exposing Sensitive AI Assets 2025-01-21 · Lasso Security
  Exposed AI assets in model repositories
• Mithril Security demonstrates model supply-chain attack by poisoning open-source GPT-J-6B on Hugging Face 2023-05-30 · Mithril Security
  Model poisoning via public hub