[tag]

#supply-chain

5 stories

[tooling]Oct 31, 2026By ByteBulletin Editor

Anthropic Claude extension backdoored on Cursor for 12 hours

A supply-chain compromise exposed up to 5,000 developers to a persistent SSH backdoor, with Anthropic yet to issue a public warning.

[research]Aug 27, 2026By ByteBulletin Editor

Trump's Chip Tariff Plan Threatens to 'Kneecap' US AI Buildout, Industry Warns

New semiconductor tariffs could raise costs, delay data centers, and slow AI adoption at the worst possible time, according to trade groups and industry insiders.

[tooling]Aug 15, 2026By ByteBulletin Editor

Sandboxing npm install: A new tool puts a denominator under 'npm install runs arbitrary code'

A new tool runs an npm package's install scripts in a sandbox and returns a signed verdict — a useful, if bounded, addition to the supply-chain security toolbox.

[tooling]Aug 12, 2026By ByteBulletin Editor

Massive supply-chain attack on LiteLLM leaks terabytes of credentials from Microsoft, Amazon, and more

A 40-minute compromise of the popular AI proxy tool exposed credentials for over 2,500 organizations, highlighting the risks of AI-driven development pipelines.

[tooling]Jul 19, 2026By ByteBulletin Editor

Throne Runs MCP Servers in Disposable MicroVMs for Zero-Trust Evaluation

A new open-source tool lets developers boot MCP servers in ephemeral microVMs, inspecting behavior before any agent interaction.