Skip to content
cPGuard
United States1 source
Reported:Reported by the press on 5 Nov 2026. The organisation has not confirmed it yet.
cPGuard update channel compromised affecting thousands of servers
Attackers turned the trusted security update channel into a supply-chain attack, executing malicious code with root privileges on nearly 3,000 Linux servers. The compromise was reported between November 4 and 5, 2026.
- Type
- Supply chain
- Sector
- Technology
- First reported
- 5 Nov 2026
- Latest source
- 5 Nov 2026
What to do
- Update the affected app or extension to the version the vendor names as clean.
- If you installed a compromised version, change passwords you used on that machine.
- Search your lockfiles and build logs for the affected package versions.
- If a malicious version was installed, rotate every secret that machine or pipeline could read.
- Pin dependencies and review install scripts in CI.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for cPGuard
Sources
1Confidence 45% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.