Wild security week: LiteLLM supply chain attack, GitLab CVSS 10.0, malicious MCP servers
therealdanvega · x · 2026-10-23
Developer Dan Vega recaps an unusually bad week in security:
- LiteLLM supply chain attack: v1.107.0 on PyPI/Docker shipped a credential stealer and backdoor, likely via stolen GitHub CLI tokens from three engineers. Pin to 1.106.2 and rotate cloud/AI keys.
- PHP shipped emergency patches for two critical no-login RCE flaws (PHP2Shell); exploit attempts predated disclosure. Upgrade to 8.5.12/8.4.27/8.3.36/8.2.35.
- GitLab has a CVSS 10.0 unauthenticated RCE on self-managed instances, affecting every version back to 7.0.
- Node.js Brotli decoder RCE fixed in 22.23.4, 24.22.1, 26.12.1; Node 20 is EOL with no fix.
- AI coding tools targeted: OpenCode had a flaw letting a malicious MCP server run code at sign-in (Windows/WSL), fixed in 1.18.33.
- Secrets leaks at Railway and Meta; BeyondTrust and Ivanti zero-days on CISA's exploited list; SafePay ransomware hit 600+ orgs; resold hardware wallets found with seed-phrase-stealing implants; researchers built a full Chrome exploit with a public AI model in 6 days.
Action items: update PHP/Node/GitLab, pin dependencies, rotate stale tokens, enable 2FA, audit installed MCP servers.
More from coding & agent
- Decisions API hits GA as agents automate cloud video editing via feedback loops — dkundel · 2026-10-23
- Swarms API changelog: 8 months of streaming, multi-agent orchestration, and dynamic model pricing — KyeGomezB · 2026-10-23
- A curated library of 50+ free AI agent resources: videos, repos, one Google Doc — ifioknkem · 2026-10-23
- Vercel adds no-account deploys: drag and drop a file to get a live URL — steren · 2026-10-23
- Dev runs 5 Claude Code sessions that coordinate via MCP Agent Mail to root his network cameras — doodlestein · 2026-10-23
- Vercel ships 'vercel deploy --temporary' for ephemeral agent-built deployments — cramforce · 2026-10-23