GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

CVE-2023-40547 – avoid incorrectly trusting HTTP headers(github.com)

239 points by DyslexicAtheist 2 years ago | 103 comments

The Marvin Attack(people.redhat.com)

87 points by hardenedvault 2 years ago | 34 comments

Unauthenticated remote code execution in OpenCode(cy.md)

406 points by CyberShadow 9 months ago | 135 comments

Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised(github.com)

888 points by dot_treo 7 months ago | 467 comments

GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.

MCP-Scanner – Scan MCP Servers for vulnerabilities(github.com)

158 points by hsanthan 1 year ago | 42 comments