supply-chain
5 posts — newest first.
-
LiteLLM 1.107.0: The Key Was Deleted in May. Nobody Revoked It.
The malicious release was live for two hours. Getting there took five months, an agent platform holding an owner's token, and a relaxed release gate.
-
Nine Agentic Exploits, One Sentence Worth Memorising
OWASP's Q3 2026 roundup reads as a containment failure report: agents escaped lab boundaries and reached real third parties. The prompt was the boundary.
-
Merkle Trees: How to Compare Two Terabytes Over a Slow Link
Derive the hash tree from the problem it solves, then find it everywhere — git, image digests, Certificate Transparency, and why a tag is not an identity.
-
The Deployment Pipeline: Build Once, Promote Everywhere
If your artifact is rebuilt per environment, staging never tested what production runs. Build once, promote everywhere is the rule the rest of CD rests on.
-
Your agent installs Markdown from the internet and runs it. We spent 20 years learning not to do that.
Agent skills are dependencies with none of the controls. What the 2026 research found, why scanners miss it, and seven fixes for platform teams.