Software Supply Chain

SALT LAKE CITY – November 10, 2026 -- Fifty-eight percent of surveyed teams ship code faster than security reviews can keep up, according to a 2026 study supported by the Open Source Security Foundation (OpenSSF), as the Linux Foundation initiative expands its AI security programs and adds three members.

Survey finds 60% of teams report more external packages from AI coding assistants

The State of AI Impact on Software Security and Cybersecurity 2026 report was supported by OpenSSF, ActiveState and the LF AI & Data Foundation. It found that 60% of respondents say AI coding assistants have increased the number of external packages in their codebases. OpenSSF says AI speeds up both code production and vulnerability discovery for attackers and defenders. Reporting windows are also shrinking under regulations such as the EU Cyber Resilience Act.

GLOBAL – October 30, 2026 -- A maliciously modified build of the Anthropic.claude-code extension, version 2.1.313, sat in the Cursor VS Code Extension Marketplace for about 11 hours on October 29, 2026, potentially exposing up to 5,000 users, according to Cursor. Anthropic did not develop the malicious version.

Payload plants an attacker SSH key and persistence on developer machines

The extension was live between roughly 2:27 AM and 1:35 PM PT. It collected host and user data, appended an attacker-controlled ssh-ed25519 key labeled svc-telemetry to the user's authorized_keys file, and installed persistence. It also attempted to enable the local SSH service and open a reverse SSH tunnel to an attacker server over TCP port 22.

Global – October 29, 2026 -- Three critical vulnerabilities rated CVSS 9.2 in Pillow, the Python imaging library with an estimated 436 million monthly downloads, let a single crafted EPS, TIFF or JPEG file trigger command execution or heap corruption in any Python service that processes user-supplied images. Disclosed on 2026-10-19, all three flaws are fixed in Pillow 13.0.0.

Pillow is a maintained fork of the original Python Imaging Library. Web frameworks such as Django and Flask, thumbnail and avatar pipelines, document and PDF tooling, and most Python machine-learning and computer-vision stacks pull it in directly or transitively. Because it routinely parses untrusted image bytes, the bugs are reachable through a plain file upload.

Global – October 27, 2026 -- A malicious version of the tensorlake npm package (0.5.144), which draws about 12,000 weekly downloads, was published carrying Shai-Hulud malware, according to OX Security.

Malware wipes the host if a stolen GitHub token is revoked

The payload contains a kill-switch string, IfYouRevokeThisTokenItWillWipeTheComputerOfTheOwner, identical to the one used in the TanStack attack in May. Revoking the stolen GitHub token triggers rm -rf ~/ on Unix systems or Remove-Item on the Windows user profile.

OX advises isolating the machine from the network and killing the gh-token-monitor persistence before revoking anything. Any machine that installed tensorlake@0.5.144 should be treated as fully compromised, with all GitHub, npm, cloud, Vault, SSH and CI secrets rotated.