Tagged with

#malware

4 articles found

cargo

Featured

The Rust Supply Chain Attack That Weaponized Cargo’s Own Safety Feature

How the arrayref compromise turned a routine cargo update into silent RCE, weaponizing yanked versions as bait

#cargo#malware

cybersecurity

Your Favorite AI Dev Hub is Now a Malware Delivery System

How attackers turned Hugging Face and ClawHub into launchpads for infostealers, trojans, and cryptominers, and why your trust is the exploit.

#cybersecurity#huggingface#malware

litellm

PyPI’s Silent Killer: How a .pth File Stole Your Secrets Without a Single Import

The Litellm supply chain attack reveals a devastating blind spot in Python’s dependency model, malicious code that executes before you even import the package.

#litellm#malware#pypi...

devops

The Sandworm Strikes Back: How Shai-Hulud Turned NPM into a Developer Nightmare

Over 1,000 packages compromised in a supply chain attack that exposed why our dependency ecosystem is fundamentally broken.

#devops#javascript#malware...