Supabase MCP can leak your entire SQL database(generalanalysis.com)

798 points by rexpository 1 year ago | 433 comments

A General Analysis blog post describing how Supabase's MCP server can be exploited via prompt injection to leak an entire private SQL database.

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

The Unofficial Guide to OpenAI Realtime WebRTC API(webrtchacks.com)

35 points by feross 1 year ago | 3 comments

Operational PGP(gist.github.com)

31 points by gone35 1 year ago | 12 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

Claude Cowork exfiltrates files(promptarmor.com)

827 points by takira 9 months ago | 366 comments

PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.