Technology ❯ Cybersecurity ❯ Supply Chain Security

Software Supply Chain

Ruby Ecosystem npm Packages Vulnerabilities Breach Incident

LiteLLM Supply‑Chain Breach May Have Exposed Thousands After 40‑Minute Malicious PyPI Window

Reconstructed datasets map potential exposure across thousands of organizations with agencies urging immediate credential rotation and tighter package‑publishing controls.

3 ARTICLES

this yr.

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages

5 ARTICLES

last yr.

Ruby Central Assumes Temporary Administrative Control of RubyGems and Bundler