Supply chain attacks are exploiting our assumptions
Summary: Trail of Bits describes how attackers exploit the trust assumptions behind commands like cargo add and pip install, citing thousands of malicious packages removed from PyPI and npm in 2024 and the XZ Utils backdoor that nearly reached millions of Linux systems. The post walks through typosquatting such as the 2022 rustdecimal package on crates.io, dependency confusion demonstrated by Alex Birsan across 35 organizations, and build pipeline compromises including SolarWinds in 2020 and Ultralytics in late 2024.
Key Takeaway: Dependency scanning only catches known vulnerabilities, so it will not flag a typosquatted package stealing credentials, a compromised maintainer publishing malware, or a poisoned build pipeline. The XZ Utils attacker spent over two years making legitimate contributions before gaining maintainer access, which means the trust placed in a long-tenured maintainer is itself the attack surface.
Read the original at Trail of Bits Blog ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026