Dependency Security: Lessons from the Axios Hack | Guide for DevOps https://sudonull.com/dependency-security-lessons-from-the-axios-hack-guide-for-devops
How the attack via Axios account compromise affected 174 thousand packages. Practical recommendations for protecting CI/CD and preventing supply chain attacks. Learn more.
Attack on litellm: credentials theft in PyPI https://sudonull.com/attack-on-litellm-credentials-theft-in-pypi
Details of litellm 1.82.7/1.82.8 compromise: collection of SSH keys, K8s secrets, exfiltration. Instructions for checking, removal, and rotation. Protect systems from TeamPCP.
PyPI LiteLLM Telnyx Attacks: Supply Chain Protection https://sudonull.com/pypi-litellm-telnyx-attacks-supply-chain-protection
Analysis of attacks on litellm and telnyx via Trivy. Recommendations on cooldown, lock-files and trusted publishers for Python developers. Avoid compromise — implement P3D.
Picows: the fastest WebSocket for asyncio without compromises https://sudonull.com/picows-the-fastest-websocket-for-asyncio-without-compromises
Analysis of picows architecture — WebSocket library with zero-copy processing and minimal latency. For algorithmic trading and high-load systems. Learn how it works.
Vercel Leak: How OAuth Hack Compromised Environment Variables https://sudonull.com/vercel-leak-how-oauth-hack-compromised-environment-variables
Breaking Down the Vercel Security Incident: From Leak via Context.ai to Environment Variables Access. Recommendations for Developers and DevOps.