⚠️ LiteLLM Supply Chain Attack - What happened?

<h2> 1. Overview </h2> <ul> <li> <strong>Report Title:</strong> ARMORY CASTLE Exploits BeyondTrust</li> <li> <strong>Source:</strong> Google Threat Intelligence Group</li> <li>

<p>Three incidents landed in five days this week. Different attack surfaces, different techniques, different threat actors. What they have in common is that none of them required

<h2> description: "Deep-dive reverse engineering analysis of a sophisticated HTML-based credential harvester spoofing a corporate domain with only 1/26 AV detection." </h2>

<p>Bitwarden serves over 10 million users and 50,000 businesses. On April 22, 2026, for exactly 93 minutes, its CLI was shipping malware.</p> <p>This was not a phishing campaign.

<h2> Introduction </h2> <p>AI coding assistants like GitHub Copilot, Cursor, Codeium, and Amazon CodeWhisperer now power a significant portion of modern software development and

<h2> TL;DR </h2> <p>While building a public advisory database for the Model Context Protocol (MCP)<br /> ecosystem, we unpacked and read the shipped code of 30+ npm packages

<h2> 1. Basic Information </h2> <ul> <li> <strong>Article Title</strong>: ArrayRef Rust Crate Supply Chain Attack</li> <li> <strong>Publisher</strong>: StepSecurity</li> <li>

<h1> MCP Security Vulnerabilities in 2026: What Every Agent Developer Must Know </h1> <p>The Model Context Protocol (MCP) has become the universal "USB-C port for AI applications"