Critical CVE issued for hallucinated SQLite vulnerability

The JFrog security research team recently identified a supply chain attack targeting the xinference package on PyPI. Versions 2.6.0, 2.6.1, and 2.6.2 were compromised and yanked by maintainers after users reported suspicious behavior. If you installed or imported these versions, you must assume your environment is compromised.

Source: https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.