https://fresh-reads.lovable.app/What developers should know about, and what to do — from advisory databases and the researchers who find supply-chain malware.Sun, 01 Nov 2026 08:57:41 +0000https://github.com/advisories?query=type%3Amalwaremalware-digest-2026-11-01Sun, 01 Nov 2026 03:30:23 +0000Including: pystr-codec — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]pypihttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-31Sat, 31 Oct 2026 16:09:39 +0000Including: @mamans2973/maman, skills-analyzer, md-to-slides, doctreelstm, is-it-ai, multi-convert, local-commander-agent — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-30Fri, 30 Oct 2026 18:06:15 +0000Including: @pcb-dp/qa-commons, @sxm-content-creators/tools-ds, vas-tops2-reportingui, vas-tops2-core-clients-search, vas-tops2-core-client-cleanup-ui, @tops2/digital-assistant-ui, vas-tops2-core-property-search, vas-tops2-digital-assistant-ui… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-29Thu, 29 Oct 2026 22:14:17 +0000Including: dowload_ebok_lolita_by_vladimir_nabokov_oy1gy, dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc, dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t, dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p, dowload_ebok_armageddon_by_max_hastings_kv3s4, bq-helix-recon-6ade983e, bq-helix-build-hook-6ade983e, orderbook-volt-plugin… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-28Wed, 28 Oct 2026 23:16:46 +0000Including: b20miner, @zaip-ai/cli, black-spindle, itsa-utils, itsa-react-checkbox, @walknpm/todo-cli, dsh-plugin-blender-3d, mock-transactions-sdk… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories/GHSA-6jp4-8v48-cc5vdb6440d0114c0792Wed, 28 Oct 2026 21:23:44 +0000Summary The main Electrum server the client connects to is trusted with mempool ("unconfirmed") transactions. This is documented design. [0] However now someone figured out a way to practically exploit it: - when the client broadcasts a new tx1, a malicious server can swallow it, — What to do: Upgrade electrum to 4.8.3 or later. [confirmed · GitHub Advisory Database]pypivulnshttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-27Tue, 27 Oct 2026 23:04:33 +0000Including: csec-form-validatorr, ccsseecc-form-validator, ccsseecc-crypto-toolkit, ccsec-crypto-toolkit, ccsec-form-validator, csec-crypto-toolkit, csec-form-validator, agentenact… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories/GHSA-26p8-2jq9-3vq96e6fe438e5786007Tue, 27 Oct 2026 21:26:32 +0000Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a — What to do: Upgrade mlflow to 3.17.0 or later. [confirmed · GitHub Advisory Database]pypivulnshttps://github.com/advisories/GHSA-6v38-4h7w-rj9h8dfecbe7bc8ba1caTue, 27 Oct 2026 14:50:18 +0000Authlib (prior to 1.9.0) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a crypto — What to do: Upgrade authlib to 1.9.0 or later. [confirmed · GitHub Advisory Database]pypivulnshttps://github.com/advisories/GHSA-m4w4-3r8h-jw98adf8b8bb6efab933Tue, 27 Oct 2026 13:30:41 +0000Impact Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component. The field_type parameter on a FunctionCall input field was passed to Python's built-in eval(), allowing an attacker who could influence that value to execute a — What to do: Upgrade agno to 2.3.24 or later. [confirmed · GitHub Advisory Database]pypivulnshttps://github.com/advisories/GHSA-6hp3-vr39-rqw8d38040e0ef4b6cc2Tue, 27 Oct 2026 13:30:10 +0000Summary An unauthenticated remote attacker can crash a running MONAILabel server or silently corrupt its medical AI inference results by uploading a single crafted DICOM file (~132 KB) via the REST API. The vulnerability stems from pydicom's lack of validation for Decimal String — What to do: Upgrade monai to 1.6.1 or later. [confirmed · GitHub Advisory Database]pypivulnshttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-26Mon, 26 Oct 2026 20:42:32 +0000Including: ctf-agent, @iobandamwer/native-helper, path-stream-utils-testmetest, @sxm-web/client-sdk-core, @greenlake/mfe-login-url, @ppa-web-components/ppa-banner, @drone-js-ext/core, @greenlake/context-pane… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-25Sun, 25 Oct 2026 21:30:24 +0000Including: nebulallm, @capsense/core-ui, zagents-message-bus, event-bus-lite-testmetest, @capsense/ccx-welcome-page, w-mousekey, @ppa-web-components/ppa-hotel-collection, @ppa-web-components/ppa-headerfooter… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html137532b55ad09e56Sat, 24 Oct 2026 16:33:33 +0530LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed t [reported · The Hacker News]pypici-cdhttps://github.com/advisories?query=type%3Amalwaremalware-digest-2026-10-23Fri, 23 Oct 2026 22:05:57 +0000Including: @k18k/entrypoint-sdk-darwin-arm64, orqiva-runtime-win32-x64, @k18k/entrypoint-sdk-linux-x64, @k18k/entrypoint-sdk-darwin-x64, taskquay, workslip, runpier, thornqueue… — What to do: snare checks lockfiles and installs against these automatically — `snare deps`. [confirmed · GitHub Advisory Database]npmpypihttps://github.com/advisories/GHSA-5x8w-8jj5-q52h81e2bf714d0eb6ceFri, 23 Oct 2026 21:55:21 +0000Credits Researcher: Alex Bouffard (mixbo@pebwalker.com) Summary A heap buffer overflow in Pillow's FlashPix (FPX) JPEG-tile decoder lets an attacker achieve arbitrary code execution by getting an application to open a single crafted file with Image.open(). The file is recognized — What to do: Upgrade pillow to 13.0.0 or later. [confirmed · GitHub Advisory Database]pypivulnshttps://socket.dev/blog/litellm-attack-timeline?utm_medium=feed2d0b1d9233b727abFri, 23 Oct 2026 21:00:31 +0000Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker. [confirmed · Socket]pypihttps://www.stepsecurity.io/blog/emudhra-emsign-ca-compromise-python-pip-ci-cd-update2762aabcf0cba475Thu, 22 Oct 2026 19:49:42 +0000Compromised eMudhra intermediate CA keys put Python dependency downloads at risk. Here are the affected tools, verified certificate-trust results, and remediation steps for pip, uv, virtual environments, and CI/CD images. [confirmed · StepSecurity]pypici-cdhttps://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/5a6bf9a2d68f29c8Thu, 22 Oct 2026 15:12:51 -0400Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...] [reported · BleepingComputer]pypici-cdhttps://thehackernews.com/2026/10/threatsday-ai-secrets-leak-pingcap.html1a0681eeb53f6c23Thu, 22 Oct 2026 23:15:44 +0530This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. A [reported · The Hacker News]npmpypivulnshttps://www.stepsecurity.io/blog/litellm-1-107-0-compromised-pypi-backdoored-wheels-credential-stealerfef19f847a8f9e02Thu, 22 Oct 2026 10:43:11 +0000litellm 1.107.0 PyPI wheels and Docker images shipped a .pth credential stealer and an hourly remote code loader that exfiltrate to litellm.dev. Analysis, IOCs, and how to respond. [confirmed · StepSecurity]pypihttps://thehackernews.com/2026/10/litellm-suspects-github-token-leak-in.html1d16a3061e0901b8Thu, 22 Oct 2026 13:58:48 +0530LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 [reported · The Hacker News]pypici-cdhttps://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html2d7bcb1fcec6b9e4Wed, 21 Oct 2026 23:31:57 +0530The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through P [reported · The Hacker News]pypihttps://www.wiz.io/blog/litellm-compromised-steals-credentials9d1ace9e2ba8ce1cWed, 21 Oct 2026 13:44:12 +0000In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability. [confirmed · Wiz]pypihttps://socket.dev/blog/litellm-compromise?utm_medium=feed53e54ec5a56a6ef5Wed, 21 Oct 2026 13:41:48 +0000A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys. [confirmed · Socket]pypihttps://www.aikido.dev/blog/litellm-compromised-infostealer-rat6a74f695cd58f166Wed, 21 Oct 2026 13:05:00 +0000LiteLLM 1.107.0 contains an infostealer and RAT, and PyPI has quarantined the package. See if you’re affected, what it steals, and what to rotate. Category: Vulnerabilities & Threats [confirmed · Aikido]pypihttps://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-docker/e6b581fd69196920Wed, 21 Oct 2026 00:00:00 +0000Malicious releases of LiteLLM v1.107.0 were published to PyPI and container registries following multiple maintainer account compromises. [confirmed · Datadog Security Labs]pypi