A Poisoned LiteLLM 1.107.0 Sat on PyPI for 103 Minutes, Published by the Project’s Own Pipeline From a Repository One Hyphen Away From the Real One
LiteLLM says attackers used three engineers’ stolen GitHub...
Browse Tag
GitHub Security
5 Articles
ChainDrop Worm Infected Over 400 npm Packages While Leaving Their Source Code Clean
A worm called ChainDrop hijacked a maintainer's GitHub account...
Docker’s OIDC Push Turns GitHub Actions Security Into an Organization-Tier Feature
Docker's new OIDC support kills stored GitHub Actions...
The Nx Supply-Chain Attack Turned AI Coding Agents Into Credential Scanners
A Docker case study revisits the Nx npm attack that turned...
Miasma Worm Disables Microsoft GitHub Repos and Exposes a New CI/CD Weak Point
GitHub disabled 73 Microsoft repositories after a Miasma-linked...