Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Jesse La Grew

Threat Level: green

Date	Author	Title
DEPENDABOT CASCADE
2026-04-27	Kenneth Hartman	TeamPCP Supply Chain Campaign: Update 008 - 26-Day Pause Ends with Three Concurrent Compromises (Checkmarx KICS, Bitwarden CLI Cascade, xinference PyPI), CanisterSprawl npm Worm Identified, and Tier 1 Coverage Returns
DEPENDABOT
2026-04-27/a>	Kenneth Hartman	TeamPCP Supply Chain Campaign: Update 008 - 26-Day Pause Ends with Three Concurrent Compromises (Checkmarx KICS, Bitwarden CLI Cascade, xinference PyPI), CanisterSprawl npm Worm Identified, and Tier 1 Coverage Returns
CASCADE
2026-04-27/a>	Kenneth Hartman	TeamPCP Supply Chain Campaign: Update 008 - 26-Day Pause Ends with Three Concurrent Compromises (Checkmarx KICS, Bitwarden CLI Cascade, xinference PyPI), CanisterSprawl npm Worm Identified, and Tier 1 Coverage Returns