Supply-chain

2 posts tagged with “Supply-chain”

Unsloth RCE: malicious Hugging Face model config.json injects code
cveunslothunsloth-zoo

Unsloth RCE: malicious Hugging Face model config.json injects code

How to fix CVE-2026-93348: upgrade unsloth-zoo to 2026.8.14+ and unsloth to 2026.8.20+

Sep 28, 2026
Read
Keyv Supply Chain Attack: 2 Billion Monthly Downloads Compromised in npm Worm
npmsupply-chainmalware

Keyv Supply Chain Attack: 2 Billion Monthly Downloads Compromised in npm Worm

Attackers compromised the GitHub account of keyv maintainer jaredwray, injecting a credential-stealing worm into 434+ npm packages with 2B+ monthly downloads.

Aug 4, 2026
Read