---

DAYS SINCE LAST

MAJOR SUPPLY CHAIN ATTACK

Xinference compromised (TeamPCP campaign)

most recently on April 22, 2026

a for fun project by Semgrep

Recent Major Supply Chain Attacks

Notable incidents that have impacted the software supply chain

Xinference compromised (TeamPCP campaign)

April 22, 2026

LiteLLM compromised (TeamPCP campaign)

March 24, 2026

KICS by Checkmarx compromised (TeamPCP campaign)

March 23, 2026

Trivy compromised (TeamPCP supply chain attack)

March 20, 2026

NPM @ctrl/tinycolor compromised

September 15, 2025

NPM debug and chalk packages compromised

September 8, 2025

Malicious versions of Nx and some supporting plugins

August 26, 2025

tj-actions/changedfiles compromised

March 14, 2025

Polyfill.io takeover

February 2025