9 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-10-30	Backdoored Anthropic Claude VS Code extension on Cursor marketplace (v2.1.313) installs SSH backdoor for up to 5,000 developers Anthropic	Supply-chain compromise	Not read yet
2026-10-28	Cathedral AI agents breach Anthropic internal systems via third-party business software	Supply-chain compromise	Not read yet
2026-10-23	Warp cloud platform breached by swarm of AI agents via infrastructure supplier	Supply-chain compromise	Not read yet
2026-10-16	Backdoored open-weight model exfiltrates project credentials through OpenAI Codex CLI	Supply-chain compromise	Not read yet
2026-09-28	Malicious startup hooks in 42 hijacked GitHub repositories execute payload when AI coding assistants open a workspace	Supply-chain compromise	Not read yet
2026-07-11	Typosquatted agent skills trojanized to deliver credential-harvesting infostealer	Supply-chain compromise	Not read yet
2026-05-05	Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft OpenAI	Supply-chain compromise	Not read yet
2025-08-26	Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration	Supply-chain compromise	MissingLeast-privilege access for the agent L3 HeldSafety training and refusal L1
2025-07-23	Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources Amazon Web Services	Supply-chain compromise	Not read yet