Skip to content

Advisories Active incidents Threat map Academy Services Solutions

Expert help Subscribe

Search advisories

Plain-language security advisories for IT teams in Taiwan: what happened, how it developed, and how to fix it. Every sentence is sourced.

Browse

Advisories
Active incidents
Academy
Search
Services
Solutions
Expert help

Data & reports

Threat map
Company filings
Taiwan disclosure report
Glossary

Policies

Methodology
Corrections policy
Disclaimer
Privacy
Terms
security.txt

Stay updated

Email alerts
RSS
Atom
JSON Feed

This site aggregates public information and is not security consulting advice. Test remediation steps before applying.

© 2026 資安通報

Keyword, CVE, vendor, product…

Type

Incident3

Severity

High1
Critical2

Category

Data breach1
Supply chain2

Status

Resolved2
Monitoring1

Region

East Asia1

Country

South Korea1

Industry

Technology2
Cross-industry1
Media, entertainment & gaming1

Domain

Supply chain2
Cloud1
Web applications1
Endpoint1
AI systems1

Vendor

Ethersphere1

Organization

BerriAI（LiteLLM）1
Socket1
TVING (CJ ENM)1
Ministry of Science and ICT1
Ethersphere（Swarm）1

Technology

CI/CD & developer tools3
Open-source package2
Database1
AI / LLM1

Attack vector

Credential abuse3
Software supply chain2

Impact

Data exfiltration2
No confirmed impact1

Data type

Credentials3

Actor type

Motivation

MITRE ATT&CK

Language / package ecosystem

RSS for this query

3 results

◆HighSupply chainMonitoringPatch availableNov 9, 2026

Ethersphere maintainers said on GitHub that Swarm Desktop 0.

▲CriticalSupply chainResolvedOct 21, 2026· updated Nov 11

LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.

Critical

▲

Data breach

Resolved

Backfill

Jun 3, 2026· updated Nov 11

A joint government-civilian team under Korea's science ministry confirmed data from 39.

Business confidential1

T1195 Supply Chain Compromise1

JavaScript / Node.js (npm)1

Subscribe to this query

Ethersphere release pipeline hijacked: bee-js 13.3.0 and Swarm Desktop 0.56.2 laced with wallet-key-stealing malware

LiteLLM release pipeline compromised; version 1.107.0 on PyPI and Docker carried credential-stealing malware for about two hours

Korean streaming platform TVING breached via stolen dev-environment key; 39.54 million accounts and source code leaked