Skip to content
Threat Feed
Subscribe

Product

Docker Hub

3 briefs RSS
high advisory

Shai-Hulud Campaign Activity

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.

jscrambler 8.14.0 +101 campaign shai-hulud
20i updated
high advisory

ClickFix Campaign Activity

Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.

open source packages +36 campaign clickfix
15i updated
high advisory

Supply Chain Attacks Target Checkmarx and Bitwarden Developer Tools

On April 22, 2026, Checkmarx and Bitwarden suffered supply chain attacks where malicious versions of their developer tools were distributed through official channels, attempting to harvest sensitive information such as GitHub and npm tokens and exfiltrating data to audit.checkmarx[.]cx.

KICS +6 supply-chain credential-theft malware
2r 4t 1i