Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable(socket.dev)

4 points by feross 1 year ago | 0 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

Made an app that summarizes recent popular stories from Hacker News(hackerdigest.upstash.app)

16 points by hezarfendd 2 years ago | 6 comments

The 100 hour gap between a vibecoded prototype and a working product(kanfa.macbudkowski.com)

219 points by kiwieater 7 months ago | 291 comments

OpenBSD Developers Reject Uutils Coreutils(news.lavx.hu)

23 points by pjmlp 22 days ago | 11 comments

News article reporting that OpenBSD developers rejected a port of the Rust-based uutils coreutils, citing licensing and compatibility concerns.

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)

282 points by campuscodi 1 year ago | 111 comments