Bitcoin Core v28.4
Bitcoin Core v28.4
Supply chain attacks are rising, and they hit close to home for self-hosters.
In April 2026, malicious versions of widely used software packages were distributed with hidden malware, targeting Linux and other systems.
Researchers also uncovered coordinated campaigns using fake packages disguised as legitimate tools.
This is where things get uncomfortable.
Most self-hosted setups rely on: • package managers
• third-party dependencies
• automated updates
Which are exactly the attack surface.
Bitcoin’s philosophy applies here too.
Even uses reproducible builds so users can verify software independently.
So the question isn’t whether to self-host.
It’s how carefully you do it.
Read links below.
https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/
https://linuxsecurity.com/news
If the tools we rely on can be compromised upstream, how much verification is enough?

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates to download from command and control (C2) that Microsoft Threat Intelligence has attributed to the North Korean state actor Sapphire Sleet. Although the malicious versions are no longer available for download, since Axios is one of the most widely used HTTP clients in the JavaScript ecosystem, this compromise exposed hundreds to potentially millions of users.
🚨 La bolsa de criptomonedas se estremece: el índice más importante cae un 2,4% en un día. Esto es importante porque afecta a todos los inversores que tienen sus ojos puestos en el mercado de bitcoin. La tendencia a la baja puede ser un indicio de una posible corrección en el mercado.