Tag: supply-chain
All the articles with the tag "supply-chain".
-
Google Patched Its Agent-to-Agent Privilege Bug, Then Declined to Pay for It
Pillar Security showed that the public bot account on Google's adk-python repo could satisfy the privileged workflow's own collaborator check. Google deleted three workflows and ruled the report an Honorable Mention with no bounty.
-
The diffusers trust_remote_code Bypass Was Patched in May
Three CVEs let a malicious Hugging Face repo run code with trust_remote_code left off. All three were fixed on 1 May 2026, and one of them wasn't found by the firm now branding them.
-
Weekly Roundup: Poisoned Skills, Booby-Trapped AGENTS.md and 19,000 Wiretapped Firewalls
Eleven posts this window, four of them about agents reading text somebody else controlled. Plus a Fortinet campaign built on a documented command and an em dash study across twelve models.
-
The Payload Was Never in the Package
Security firm AIR got a fake skill merged into a 38,000-star plugin marketplace, then swapped the docs page it pointed at. Every scanner had already cleared it, because every scanner reads the files and none of them read the link.