Supply Chain Security

The October 2026 LiteLLM GitHub-identity compromise, as publicly reported, broke down step by step — and the specific, boring GitHub control that would have ended the chain at each point. Plus nine free, in-browser tools to check your own setup.

NIST SSDF (SP 800-218) explained: the four practice groups, all 19 practices by ID, how it maps onto your SDLC, and what federal SSDF attestation asks for.

CVE-2026-85097 is a CVSS 10.0 unauthenticated file-upload RCE in Bricksforge up to 3.1.8.9, exploited since 7 Oct 2026. Patch to 3.1.8.10+ and hunt IOCs.

Abliteration removes an open-weights LLM’s ability to refuse by deleting its "refusal direction" — not a jailbreak or a retrain. How to govern the risk.

Deloitte was listed on The Gentlemen ransomware leak site on 11 Oct 2026, marked 'Data info - soon.' Unverified: no data published, no Deloitte confirmation.

A compromised release of the tensorlake npm SDK (version 0.5.144) carries a Shai-Hulud / ChainDrop-family worm. A preinstall hook runs setup.mjs, skips CI so it lands on developer laptops, pulls the Bun runtime and executes an obfuscated payload that steals GitHub and npm tokens, cloud keys, Kubernetes and Vault secrets, SSH keys, browser logins and AI-tool configs, then republishes itself into every package the stolen npm token can reach. The twist: a “gh-token-monitor” service wipes the home directory if you revoke the stolen GitHub token. Safe version to pin: 0.5.143. Developing story — what’s confirmed, what isn’t, and the order of operations for cleanup.

A malicious @subql/common on npm stole .npmrc, .env, AWS, SSH and GitHub keys — part of ChainDrop, a Shai-Hulud-family worm. The defender’s playbook.

Hacktron chained a libheif overflow, RCE on community.openai.com, and an SSO flaw into ChatGPT/Codex takeover and internal repo access in under 72 hours.

Elastic Security Labs is investigating @apexacc/cli, an npm package still live on the registry that disables Windows Smart App Control and AV exclusions, then chains Base64 PowerShell through Python/PyInstaller, PyArmor and a Go shellcode loader to an infostealer. What we know so far, credited to the source.

VirusTotal released VTAI: a free, no-API-key MCP server and REST API letting AI coding agents check file, URL, domain and IP reputation. What the 7 tools actually do, the real limits, and what to know before wiring it into an agent.

VirusTotal’s free VTAI lets any AI agent check file and URL reputation in one call. Before your engineering team wires it in, here is the governance checklist: what it can leak, what it won’t block by default, and how to roll it out safely.