T1195Initial Access

Supply Chain Compromise

Adversaries may manipulate products or product delivery mechanisms prior to receipt by a final consumer for the purpose of data or system compromise. Supply chain compromise can take place at any stage of the supply chain including: * Manipulation of development tools * Manipulation of a development environment * Manipulation of source code repositories (public or private) * Manipulation of…

attack.mitre.org ↗

CVEs1

In 1

Reports0

Sub-techniques T1195.001Compromise Software Dependencies and Development Tools T1195.002Compromise Software Supply Chain10 T1195.003Compromise Hardware Supply Chain

Detections

1 Sigma rule tagged T1195

Supply Chain CompromiseT11951 general rule

Octopus Scanner Malwarehightest

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Supply Chain Compromise

1 CVE, by priority. Each link shows its badge.

CVE-2024-49035Microsoft Partner Center Improper Access Control Vulnerability
Microsoft · Partner CenterKEVCritical · 9.8T1195Supply Chain Compromise T1068Exploitation for Privilege Escalation+1 more
MITRE CTID mapping of the KEV entry · primary impact
1.3%Top 30%
58.9priority

Linked through a sub-technique

10 more

CVE-2026-45321TanStack Unspecified Vulnerability
TanStack · TanStackKEVRansomwarePublic exploitCritical · 9.6T1195.002Compromise Software Supply Chain T1528Steal Application Access Token1 report
3.3%Top 12%
86.3priority
CVE-2026-48027Nx Console Embedded Malicious Code Vulnerability
Nx · Nx ConsoleKEVRansomwarePublic exploitCritical · 9.8T1195.002Compromise Software Supply Chain T1059Command and Scripting Interpreter1 report
1.8%Top 21%
84.5priority
CVE-2026-33634Aquasecurity Trivy Embedded Malicious Code Vulnerability
Aquasecurity · TrivyKEVPublic exploitHigh · 8.8T1195.002Compromise Software Supply Chain T1552.001Credentials In Files2 reports
59.7%Top 0.87%
80.1priority
CVE-2021-44529Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1195.002Compromise Software Supply Chain
99.1%Top 0.07%
79.8priority
CVE-2026-8398Daemon Tools Lite Embedded Malicious Code Vulnerability
Daemon · Daemon Tools LiteKEVPublic exploitCritical · 9.8T1195.002Compromise Software Supply Chain T1553.002Code Signing
1.5%Top 27%
69.6priority
CVE-2025-30066tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
tj-actions · changed-files GitHub ActionKEVPublic exploitHigh · 8.6T1195.002Compromise Software Supply Chain T1552.001Credentials In Files
72.1%Top 0.57%
68.9priority
CVE-2024-4978Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
Justice AV Solutions · Viewer KEVPublic exploitHigh · 8.4T1195.002Compromise Software Supply Chain T1005Data from Local System+2 more
26.9%Top 2%
68.5priority
CVE-2025-54313Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Prettier · eslint-config-prettierKEVPublic exploitHigh · 7.5T1195.002Compromise Software Supply Chain T1059Command and Scripting Interpreter
5.1%Top 7.6%
66.7priority
CVE-2025-30154reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
reviewdog · action-setup GitHub ActionKEVPublic exploitHigh · 8.6T1195.002Compromise Software Supply Chain T1552.001Credentials In Files
2.5%Top 15%
65.9priority
CVE-2025-59374ASUS Live Update Embedded Malicious Code Vulnerability
ASUS · Live UpdateKEVCritical · 9.8T1195.002Compromise Software Supply Chain T1059Command and Scripting Interpreter
1.2%Top 32%
63.5priority