GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

The feed describes a surge of high-impact activity across software supply chains, active exploitation of multiple web and CMS flaws, and coordinated takedowns of attacker infrastructure. Key developments include CrowdStrike/Google/Shadowserver disrupting GlassWorm C2s; cross-ecosystem supply-chain campaigns (TrapDoor, Laravel‑Lang, Packagist) distributing credential-stealers and Linux malware; the Megalodon campaign injecting malicious GitHub Actions into thousands of repos; and multiple actively exploited vulnerabilities (notably a 10.0 CVSS LiteSpeed cPanel plugin flaw and a 9.4 Ghost CMS SQ