Observed: 2026-10-23 UTC
Advisory: GHSA-78g4-xqwv-q3g8 / OSV-2025-219
Evidence engine: Ormino 0.7.0, revision a6b12ce
Verdict: Pillow 12.3.0 selects an affected OpenJPEG source archive and its official Linux wheel contains libopenjp2. Pillow 13.0.0 carries a patch that touches the matched vulnerable source; Ormino conservatively reports patched-unknown until post-patch compiled bytes or an attestation proves the final source revision.
| Release | Evidence chain | Ormino verdict | Time |
Defensive inventory generated by Ormino. Source presence, patch intent, build selection, runtime reachability, and exploitability are separate claims.
| Field | Result |
|---|---|
| Ormino release | 0.8.0 |
| Evidence revision | 443bde9 |
| Observed | 2026-10-23 UTC |
| GitLab CVEs | 4 |
Defensive inventory generated by Ormino. This is byte-level provenance evidence, not an exploitability or deployment claim.
| Field | Result |
|---|---|
| Ormino release | 0.6.0 |
| Evidence revision | 59798f2 |
| Observed at | 2026-10-23T07:18:00Z |
| GitHub stars refreshed | 2026-10-23T08:00:14Z |
Defensive inventory generated by Ormino. This is byte-level provenance evidence, not an exploitability or deployment claim.
| Field | Result |
|---|---|
| Ormino release | 0.6.0 |
| Evidence revision | 59798f2 |
| Observed at | 2026-10-23T07:18:21Z |
| GitHub stars refreshed | 2026-10-23T08:00:14Z |
Issue: out-of-bounds write in the Brotli C decoder.
Upstream fix: google/brotli@0ed4268.
Evidence refreshed: 2026-10-24.
brotli, upgrade to 1.2.1 or later and rebuild the
environment, image, or executable that contains it.
Assessment date: 2026-10-21 UTC
Verdict: Confirmed malicious — high confidence
Affected artifacts: Seven observed litellm==1.107.0 platform wheels
Not demonstrated in: The 1.107.0 source archive or the examined 1.107.0rc2 baseline wheel
Primary behavior: Automatic startup execution, credential collection, encrypted exfiltration, and a persistent remote-code loader
This report contains defanged malware indicators. It documents static analysis; no payload was executed and no command-and-control endpoint was contacted.
This Gist corrects and explains the credential ambiguity in Pruva reproduction REPRO-2026-00340.
reproduction_steps_no_admin.sh: corrected end-to-end reproduction. After normal first-run installation setup, it performs no admin login, authenticated ConfigEditor render, or privileged readback.reproduction_steps_deployed_annotated.sh: reference-only annotated copy of the script currently deployed with REPRO-2026-00340. It shows exactly where admin and attacker sessions are used and why the old oracle is misleading.deployed_script_analysis.md: two controlled replay results, including the deliberately wrong-password diagnostic.session_provenance.md: session-level evidence from the corrected no-admin replay.
Date: 2026-04-23
The npm package @bitwarden/cli@2026.4.0 contains a malicious install-time payload. The package adds a preinstall hook that runs a Node bootstrapper, downloads Bun if needed, then executes a large obfuscated Bun bundle named bw1.js.
This is a full supply-chain worm and secret exfiltration agent. It harvests local secrets, CI secrets, GitHub repository secrets, and cloud secret stores, then exfiltrates encrypted results and uses stolen npm tokens to publish infected package updates.
Analyzed using Adobe's real SpiderMonkey JS engine (EScript.api) running on Linux Engine loaded via taviso/loadlibrary fork
| Field | Value |
|---|---|
| SHA-256 | 54077a5b15638e354fa02318623775b7a1cc0e8c21e59bcbab333035369e377f |
Date: 2026-04-10
Analyst: nemesis
Classification: Trojan / Backdoor (Alien RAT variant)
Severity: CRITICAL
Campaign ID: CityOfSin (extracted from C2 callback UTM parameters)
Scope: CPUID official domain compromise affecting CPU-Z, HWMonitor, HWMonitor Pro, PerfMonitor 2, powerMAX + separately FileZilla
Status: Breach confirmed and fixed by CPUID; site was compromised ~6 hours on April 9-10, 2026
CPUID Statement: "A secondary feature (a side API) was compromised for approximately six hours [...] causing the main website to randomly display malicious links. Our signed original files were not compromised."