research.jfrog.com

SQLite Critical CVEs or LLM Slop? - JFrog Security Research

The JFrog security research team recently identified a supply chain attack targeting the `xinference` package on PyPI. Versions 2.6.0, 2.6.1, and 2.6.2 were compromised and yanked by maintainers after users reported sus…

If the page stays blank, open it in a new tab. Your Weird rating still works from the top bar.

Open source