Compromised npm and Python Packages: Action Steps
Supply chain attacks targeting npm and Python packages can expose development environments and organizational networks. Here are the key controls, actions, and prevention steps.
Tag: Python
FaceHugger flaws: Diffusers code execution risk
Researchers disclosed FaceHugger flaws that can enable arbitrary code execution when Diffusers loads crafted model repositories. Fixes landed in Diffusers 0.38.0.