Hello, this is Kaname🧪Last time, I talked about the "true nature of requirements.txt." Thank you to everyone who read ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to ...

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

Security researchers have uncovered another LiteLLM package hijack, warning that malicious code in version 1.107.0 can steal ...

Home Assistant’s unofficial app store is going official.

PHP2Shell (CVE-2026-109618/109619) enables RCE without authentication. Patches are coming today; the NCSC and other sites are ...

The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...

What’s the Sidewinder?Custom & Collectible Firearms isn’t in the business of making their own firearms—they take other manufacturers’ designs and embellish and otherwise improve them.In this case, ...

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.

On October 9, 2026, Google's research team (Google Cloud AI Research) and Northwestern University posted the "Harness²" paper ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

SpotiFLAC has taken down its public GitHub repository after a Spotify legal notice, but the developer isn't abandoning the ...