StepSecurity
PulseAugur coverage of StepSecurity — every cluster mentioning StepSecurity across labs, papers, and developer communities, ranked by signal.
1 day(s) with sentiment data
-
LiteLLM 1.107.0 released with backdoor despite signed build
The LiteLLM Python package experienced a security breach on October 21, 2026, when version 1.107.0 was released with a credential-stealing backdoor. Despite the release pipeline being cryptographically signed and previo…
-
Microsoft GitHub Repos Hacked, Malware Targets AI Coding Tool Users
Microsoft has disabled over 70 of its GitHub repositories, including those related to Azure and AI coding agents, following a security incident. Hackers had previously compromised a Microsoft development tool, pushing m…
-
New npm worm steals AI dev secrets, spreads to other packages
A new supply chain worm, similar to previous attacks attributed to TeamPCP, is spreading through compromised npm packages. This malware targets developers by stealing sensitive information like API keys and cryptocurren…