Malware
supplychain.local
- First Reported
- Sep 23, 2026
- Latest Reported
- Sep 23, 2026
Reported Context (1)
- packages via direct publishing and via compromised GitHub actions. We’re tracking this worm as supplychain.local based on the threat actor’s name for the core Go module. Aikido Analyzes Suspected npm and PyPI Supply-Chain Worm
MITRE ATT&CK (5)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.