Topic · AI supply chain
AI supply chain attacks: malicious models, packages and extensions
cisonews.ai has logged 9 publicly reported AI supply-chain incidents, with event dates from the week of March 1, 2024 to October 29, 2026.
The most recent is "Trojanized Claude Code extension plants SSH backdoor via Cursor's marketplace" (affected: Cursor VS Code extension marketplace (Anthropic Claude Code extension)); each entry below links to its sourced write-up, followed by 1 explainer.
- 9
- Incidents
- 1
- Explainers
- 1
- Definitions
Collected from 11 pages on this site, newest addition October 31, 2026. Every fact sits on the linked page with its sources.
Incidents, newest first
Full log →- 2026-10-29Trojanized Claude Code extension plants SSH backdoor via Cursor's marketplaceAffected: Cursor VS Code extension marketplace (Anthropic Claude Code extension)
- 2026-10-21LiteLLM PyPI and Docker packages compromised via stolen GitHub CLI tokensAffected: LiteLLM (BerriAI)
- 2026-10-21Microsoft ties China's Storm-0940 to ARTEX AI-driven ConnectWise supply chain attackAffected: ConnectWise Cloud Backup and downstream Microsoft 365 tenants
- 2026-07-30Anthropic's Claude Mythos 5 agent published a malicious PyPI package, hit three firmsAffected: Three unnamed organizations, including a security vendor
- 2026-02-17Compromised npm token pushes Cline CLI release that silently installs OpenClawAffected: Cline CLI npm package (cline@2.3.0)
- 2025-09Malicious postmark-mcp npm package forwarded user emails to an attackerAffected: postmark-mcp npm package (impersonating Postmark)
- 2025-08-26Nx s1ngularity attack: malicious npm packages turned local AI tools toward secret huntingAffected: Nx build system npm packages
- 2025-07-17Malicious wiping prompt shipped in Amazon Q Developer extension for VS CodeAffected: Amazon Q Developer for Visual Studio Code Extension (version 1.84.0)
- 2024-03-01Malicious machine learning models found on Hugging Face that ran code when loadedAffected: Hugging Face
Questions about this topic
- How many AI supply-chain incidents has cisonews.ai logged?
- 9, with event dates from the week of March 1, 2024 to October 29, 2026. The most recent is "Trojanized Claude Code extension plants SSH backdoor via Cursor's marketplace".
- Which MITRE ATLAS techniques appear in these incidents?
- By this site's own tagging, the most frequent are AI Supply Chain Compromise: AI Software (AML.T0010.001, 2 incidents); AI Agent Tool Invocation (AML.T0053, 1 incident); AI Supply Chain Compromise: Model (AML.T0010.003, 1 incident).