NuGet API key expiration 2026: Microsoft caps new NuGet.org API keys at 30 days starting August 17, forcing all existing keys ...
Spread the loveIf you’ve spent any time at all working with APIs, you know the drill: you’re constantly juggling different ...
Security researcher Kevin Beaumont got a call last week from a major US technology company that insisted it had nothing to worry about: all the credentials stolen in March's LiteLLM supply chain ...
Researchers obtained 153GB of stolen credentials linked to a LiteLLM supply-chain attack affecting nearly 2,500 organizations. The archive includes cloud keys, access tokens, AI provider keys, and ...
LiteLLM supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines in 40 minutes. FBI warns threat still live.
Threat-intelligence firm CloudSEK said in a report published August 11, 2026 that it has identified more than 2,500 organizations potentially exposed by the March 2026 supply-chain compromise of ...
Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...
A massive supply chain attack on the Node Package Manager (npm) registry has infected over 400 packages with over 2 billion downloads with the ...
A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.
A hijacked GitHub account let the Shai-Hulud worm pass npm's trust check, spreading through packages with 2 billion monthly ...
GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...
Security researchers have warned of a major new Shai-Hulud-based campaign which has already compromised more than 430 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results