October's Supply Chain Nightmare: 15 Breaches Hit Railway, LiteLLM, OVHcloud
AaronBergman18 · x · 2026-10-22
A widely shared list documents October's brutal month for software supply chain security: Railway customer secrets exposed, LiteLLM malicious PyPI + Docker releases, Zeabur infrastructure breached, OpenCode AI API keys leaked, OVHcloud CLI binaries backdoored, Rank Math PRO malware, GhostAction malicious GitHub workflows, PHP critical RCEs, and the eMudhra CA key compromise affecting Tailscale, among others.
More from Safety
- "The threat was never rogue AI—it's humans using AI to hurt humans," answered with the 'Always has been' meme — ericwdolan · 2026-10-22
- FrankenTorch: a memory-safe clean-room Rust rewrite of PyTorch with 6,300+ commits — doodlestein · 2026-10-22
- Dev posts denied Cyber Verification Program screenshot, vows never to pay Anthropic again — arthurcolle · 2026-10-22
- GoFaceless pauses service after Railway hosting security incident — nijfranck · 2026-10-22
- FBI issues global alert on two critical PHP RCE vulnerabilities, advises taking unpatched systems offline — denisparra · 2026-10-22
- Anthropic alignment team flags 'eval awareness': are models only behaving while being watched? — matiroy · 2026-10-22