6 incidents
Risk: Supply-chain compromise Confirmed
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-10-28 | Cathedral AI agents breach Anthropic internal systems via third-party business software | Supply-chain compromise | Not read yet | |
| 2026-10-23 | Warp cloud platform breached by swarm of AI agents via infrastructure supplier | Supply-chain compromise | Not read yet | |
| 2026-07-11 | Typosquatted agent skills trojanized to deliver credential-harvesting infostealer | Supply-chain compromise | Not read yet | |
| 2026-05-05 | Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft OpenAI |
Supply-chain compromise | Not read yet | |
| 2025-08-26 | Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration | Supply-chain compromise | ||
| 2025-07-23 | Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources Amazon Web Services |
Supply-chain compromise | Not read yet |