CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

🦋 🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs.bsky.social into @pypi.org and is still spreading.

1 Posts 1 Posters 0 Views

B This user is from outside of this forum
B This user is from outside of this forum
bloglab@mstdn.feddit.social

wrote last edited by

#1

UPDATE: Mini Shai-Hulud has crossed from
@npmjs.bsky.social into @pypi.org and is still spreading.
Newly confirmed compromised artifacts:
@opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads)
mistralai: 2.4.6 on PyPI
guardrails-ai: 0.10.1 on PyPI
https://bsky.app/profile/socket.dev/post/3mln2ck4joc2p
#Security #SupplyChain #Bluesky
1 Reply Last reply
1
0
R relay@relay.infosec.exchange shared this topic

Log in to reply