cyber_pix·Nov 2One Forgotten Key, One Poisoned Release: What the LiteLLM Supply-Chain Attack Means for Your…On October 21, 2026, a compromised version of LiteLLM (1.107.0) was published to PyPI and to the project’s official container registries…
EthnoLogos·Oct 28The Frankenstein Syndicate: How Russian Code and North Korean Crypto Laundries Built the Ultimate…Why do we call it the Frankenstein Syndicate? Because the modern cyber attack is no longer the work of a single evil genius. Like Dr…
Abnet Mekuria·Oct 27Blocking Critical npm Packages Before They Reach Your DevelopersHow open-source tools - Verdaccio, OSV, and a small middleware made registry-level blocking simple to run
Saniye Nur·Oct 26Black October: Investigating the LiteLLM Supply Chain CompromisePart 2 — LiteLLM: How a Trusted Release Became a Credential Stealer
Adnan Masood, PhD.·Oct 23The Code We Trust: Inside Software Supply Chain CollapseRailway, LiteLLM, Zeabur, OpenCode, ConnectWise, eMudhra, PHP2Shell and a dozen more: what broke, how, and what to do about itA response icon1A response icon1
Kenan Ayvataş·Oct 9From Hotel WiFi to EV Chargers: Inside the AI Powered Crime Wave Anthropic Calls “Vibe Hacking”There is a particular kind of criminal who used to need a crew. Breaking into a company’s network, finding the valuable data buried inside…A response icon1A response icon1
moonNight·Oct 7Anatomy of a Discord Token Hijack: Why 2FA Isn’t Enough (A Security Post-Mortem)It was a regular morning. I had just finished my daily stand-up at work when I noticed a bizarre notification: notification about ignored…
R4shSec·Oct 3Reverse Engineering the Mini Shai-Hulud Worm Affecting Mistral==2.4.6 (Part 1)Hey everyone 👋
Loginsoft·Sep 10npm and PyPI Supply Chain Attacks: How Malicious Packages Bypass Security ControlsIntroduction
COFFSec·Sep 1ArrayRef Supply Chain Attack: How a Compromised Rust Crate Delivered Malware at Build TimeA technical walkthrough of the August 20 2026 Rust supply chain attack on the arrayref crate (244 million all time downloads).
