software supply chain

Everything Threat Times has reported about software supply chain: 3 stories, newest first. Part of our Cyber Attacks coverage.

Vulnerabilities

Bloom Security Finds 1,500 npm Packages Vulnerable to AI-Driven Supply Chain Attacks

Threat TimesOct 13, 2026

Research reveals how automated AI coding tools could install malicious code via compromised npm packages, exposing enterprises to significant supply-chain risks.

Cyber Attacks

AWS publishes guide for ML-DSA quantum-resistant signing in software supply chains

Threat TimesOct 12, 2026

Amazon Web Services released a two-part series detailing how to build and enforce post-quantum signing pipelines using NIST-standardized algorithms.

AI

Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

Threat TimesOct 12, 2026

Toronto-based Insignary introduced Clarity AIR on October 8, 2026, to help organizations identify hidden open-source and AI-generated code components.