Polymarket customers lose $3 million in supply-chain attack
Teaser from the source
Polymarket says it will fully reimburse customers who lost an estimated $3 million after hackers injected a malicious script into the platform's frontend following a breach at a third-party vendor. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on supply-chain
Other advisories
- Criticalpwn_watch:litellm-1-107-0-pypi-compromiseLiteLLM 1.107.0 PyPI/Docker supply-chain compromise
- CriticalCVE-2026-111862Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 20…
- Not ratedosv:GHSA-93qj-5q5v-3c2hTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- Criticalghsa:GHSA-93qj-5q5v-3c2hTrojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
- Not ratedosv:GO-2026-5416gitverify has improper tag signature verification in github.com/supply-chain-tools/gitverify
- HighCVE-2026-41387OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides
- Not ratedsingcert:ad-2026-001Ongoing 'TeamPCP' Supply-Chain Campaign
- Not ratedosv:CVE-2026-28500ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack
Other news entries
- Qubole supply chain attack exposed AWS, Entra ID, and Okta credentialsNewsCSO Online
- Attackers backdoor trusted AWS integrations to steal secretsNewsThe Register — Security
- Attackers turned OpsShield’s trusted update channel into a supply-chain attackNewsCSO Online
- NIKKE PC game launcher hacked to spread remote access, data-stealing malwareNewsBleepingComputer
- Anthropic: That Claude Code extension compromise… couldn't be usNewsThe Register — Security
- WordPress SEO plugin Rank Math compromised to backdoor websitesNewsBleepingComputer
- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attackNewsBleepingComputer
- Hallucinated domain in official OpenAI skill underscores AI supply chain risksNewsCSO Online
ID