Reversinglabs

Attackers Exploit Software Supply Chain Vulnerabilities in 2025

First seen 29 Jan 2026, 22:54 UTC • Reversinglabs

•40.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In 2025, attackers exploited vulnerabilities in the software supply chain, specifically targeting the Pickle AI model format to distribute malware. The Python Package Index also faced similar attacks, affecting numerous developers and organizations relying on these platforms for software distribution.

How this analysis works

Continue Reading

Critical Vulnerabilities Found in PickleScan Tool for AI Models Critical Unauthenticated RCE Vulnerability in LiteLLM Exploited in the Wild Critical RCE Vulnerability in Marimo Exploited Within 10 Hours of Disclosure ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability North Korean Hackers Target Open Source Software Supply Chain via npm Packages Critical CVE-2026-11332 Affects Fedora Ansible-Core Versions

Attackers Exploit Software Supply Chain Vulnerabilities in 2025

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading