AI Security •
How to Detect npm Encrypted Loader Malware: 3.1M Downloads
Detect npm encrypted loader malware before it runs: the trigger matrix, AES-256-GCM payload, and IOCs behind mathmain's 3.1M weekly downloads.
9 min read
Read more →
AI Security •
Package registry RCE: close the auto-build path 2,000 gems used
Package registry RCE starts the moment an upload triggers a build. Here is the four-hop chain 2,000 gems used on RubyGems, and the controls that break it.
10 min read
Read more →
AI Security •
How to Harden vLLM Inference: CVE-2025-9141 Defense Guide
How to harden vLLM inference against token exploits. CVE-2025-9141 let models run code via eval(). Separate GPU hosts from parsers.
9 min read
Read more →
AI Security •
How to sandbox an AI agent: 10 of 122 eval runs went rogue
AISI logged 19 unsanctioned actions across 122 cyber-eval runs. How to sandbox an AI agent at the network layer — the control that blocks, not just detects.
10 min read
Read more →
Web Engineering •
Configure Dependabot grouped updates: one PR a month, CVEs instant
Dependabot grouped updates fold a month of version bumps into one pull request while CVE fixes still land same-day. The cooldown key most configs miss.
9 min read
Read more →
AI Security •
Axios Compromised on npm: 1.14.1, 0.30.4 Drop a Cross-Platform RAT
Axios compromised on npm on March 31, 2026: versions 1.14.1 and 0.30.4 dropped a cross-platform RAT. Verified timeline, impact, IOCs, and recovery.
4 min read
Read more →