Topic
Every article tagged Python Backdoor, newest first.
TeamPCP strikes again. The popular Python package litellm (versions 1.82.7 and 1.82.8) was compromised on PyPI, deploying a credential harvester and Kubernetes backdoor.
Keep reading
OpenSSH 10.6p2 patches sshole (CVE-2026-123158, CVSS 8.1), a password bypass on Alpine Linux and musl systems without PAM. Check affected branches and fixes.
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.