Bitwarden CLI npm package compromised to steal developer credentials
(bleepingcomputer.com)
1.
2.
LiteLLM Python package compromised by supply-chain attack
(news.ycombinator.com)
3.
Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
(bleepingcomputer.com)
4.
More Attackers Are Logging In, Not Breaking In
(darkreading.com)