AITechRadarabout 2 hours ago
Developer devices are new supply chain blind spot
6 min read
Recent attacks hit Axios, Trivy, LiteLLM, SAP, Vercel, and a Mini Shai-Hulud campaign affecting TanStack, UiPath, and Mistral AI. GitHub confirmed attackers accessed nearly 3,800 internal repositories after a poisoned Nx Console VS Code extension with 2.2 million installs landed on one employee's laptop via a stolen token.
Level
Hype check
Tap to vote and see what everyone thinks.
