One Missile, One Plant: 70% of the World's PCB Resin Offline
An Iranian strike on SABIC's Jubail complex took out 70% of global PPE resin. PCB prices rose 40%, lead times 5x. Every AI server and GPU needs PCBs.
#supply-chain
4 posts
→
3,800 Repos, One Poisoned Extension: GitHub Breached
TeamPCP breached GitHub via a poisoned VS Code extension: 3,800 internal repos, Copilot and CodeQL source exposed, now for sale on BreachForums.
securitygithubsupply-chainvscodebreach
→
170 Packages. 518 Million Downloads. One Worm.
A self-propagating worm hit TanStack, Mistral, UiPath and 170+ npm/PyPI packages in hours, then Nx Console. What was stolen and how to check if you're hit.
securitysupply-chainnpmPyPIdeveloper-tools
→
Vercel Breached: ShinyHunters Is Selling the Keys
ShinyHunters breached Vercel and is selling its databases and GitHub/NPM tokens for $2M. With 6M weekly Next.js downloads, the blast radius is huge.
securityvercelnextjssupply-chainbreach