Supply-chain: NK Drift $285M Solana/Axios NPM/Claude Code/Trivy/OpenClaw/NPM Strapi/AppsFlyer/GitHub AI PR/ComfyUI + Python EOL
Key Questions
What vulnerabilities were patched in OpenClaw?
Developers at OpenClaw patched three high-severity vulnerabilities, including CVE-2026-33579, early last week. These fixes address critical security issues reported by Ars Technica.
How did North Korean hackers target the Drift Protocol?
North Korean group UNC4736 conducted a six-month intelligence operation leading to a $280 million hack on Drift Protocol, a Solana-based decentralized derivatives platform. The attack followed the STRIDE incident and involved tools like VSCode and Cursor.
What supply chain attack involved malicious NPM packages targeting Guardarian users?
A bad actor uploaded 36 malicious NPM packages, including those mimicking Strapi, targeting Guardarian users for supply chain attacks. These packages aimed to deliver malware and compromise users.
What flaw was discovered in Claude Code?
A critical flaw in Claude v2.1.90 silently bypasses user-configured security rules. Hackers have exploited leaks of Claude Code source to spread Vidar and GhostSocks malware.
How has OSS malware trended recently?
Open-source software malware has surged, with a 48% increase noted, and over 90% acceleration in 2025 according to Endor Labs. This includes threats in NPM like Axios breach with RAT attacks.
What is the status of Python 3.10?
Python 3.10 reaches end of life on October 31, 2026, after which the Python Software Foundation will no longer provide security updates. Users should plan migrations to supported versions.
What AI-assisted attack targeted GitHub?
Threat actors used AI-assisted automation for hundreds of exploit attempts on GitHub open-source repositories. This supply chain attack highlights risks in AI-enhanced malicious PRs.
What role did North Korean IT workers play in DeFi?
Expert Taylor Monahan stated North Korean developers contributed to top DeFi protocols during DeFi Summer without faking resumes. This underscores infiltration risks in crypto development.
OpenClaw patches high-sev CVE-2026-33579+; Solana STRIDE post-Drift NK UNC4736 via VSCode/Cursor; AI GitHub PR/NPM C2; AppsFlyer SDK 100k+; Claude v2.1.90; Trivy/ComfyUI; OSS malware +48%; runZero CVEs; Python 3.10 EOL.