[socket]

October 22, 2026

• LiteLLM 1.107.0 shipped a credential stealer and backdoor in all seven PyPI wheels and a published container image. Socket says startup hooks execute whenever Python starts—even without importing LiteLLM—and can steal cloud, developer and AI credentials or load remotely supplied Python. Container provenance points to Berri-AI/litellm, a lookalike of the legitimate BerriAI/litellm. Approximately 23 million downloads per week measures package reach, not infections. Stop deploying 1.107.0; investigate environments where Python ran, rebuild from verified artifacts and rotate exposed secrets. SafeDep adds technical analysis. (discussion) · Supply Chain & Developer Security

in PHP2Shell Is Already in the Wild

August 29, 2026

• 18 Chrome and one Edge extension published over the past six months shipped wallet-secret theft and crypto-draining code, sharing enough code and tradecraft to indicate a single cluster, per Socket (The Hacker News). · Threat Activity

in PaperCut Ships a Second Emergency Patch After Researchers Bypass the First

July 12, 2026

Exploit Chains, Poisoned Packages, and AI Agents Turned Against Their Owners

Android 17 users face a public browser-to-kernel exploit chain combining Firefox JIT RCE (CVE-2026-10702) with kernel exploits for full device compromise. U-Boot firmware has six critical signature-verification flaws affecting 50+ stable releases and embedded devices worldwide, enabling arbitrary code execution and root-of-trust bypass. AI coding agents are now targets: Ghostcommit hides prompt-injection payloads in PNG images to steal environment secrets, while HalluSquatting weaponizes AI model hallucinations to register fake package names and deliver botnets to trusting developers. The jscrambler npm package was compromised with a Rust infostealer that executes on installation across Windows, macOS, and Linux.