Skip to content
OPSSHIELD
Austin, United States1 source
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 5 Nov 2026.
Hackers poison cPGuard updates compromising nearly 3,000 servers
Attackers poisoned cPGuard security updates after breaching developer OPSSHIELD's update infrastructure, compromising nearly 3,000 Linux servers. The malicious code executed with root privileges, exposing sensitive credentials.
- Type
- Supply chain
- Sector
- Technology
- Records
- 7.9K records confirmed
- First reported
- 5 Nov 2026
- Latest source
- 5 Nov 2026
What to do
- Update the affected app or extension to the version the vendor names as clean.
- If you installed a compromised version, change passwords you used on that machine.
- Search your lockfiles and build logs for the affected package versions.
- If a malicious version was installed, rotate every secret that machine or pipeline could read.
- Pin dependencies and review install scripts in CI.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for OPSSHIELD
Sources
1Confidence 70% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.