Malicious Rust crate Arrayref runs a build-time payload(safedep.io)

532 points by abhisek 2 months ago | 468 comments

SafeDep blog post analyzing a malicious version of the Rust crate arrayref that executes a payload at build time via a supply-chain attack.

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

Apple Silicon and macOS VMs: Faster LLM Inference with llama.cpp(github.com)

283 points by frabonacci 2 months ago | 43 comments

Setting Up an RK3588 SBC QEMU Hypervisor with ZFS on Debian(blog.kumio.org)

59 points by kumiokun 1 year ago | 17 comments

Keycloak SSO with Docker Compose and Nginx(du.nkel.dev)

190 points by Helmut10001 2 years ago | 81 comments