JFrog Ltd

GitHub worm hides in oversized files.

Supply chain solution company JFrog found the test me test NPM worm had armed 42 GitHub repositories from 11 owners, despite initially appearing limited to test accounts.

Roughly 13 megabyte payloads evaded GitHub's code search.

The worm steals credentials, spreads through packages and repositories, and can wipe a victim's home directory when a stolen GitHub token is revoked.

Attackers also planted hooks for Claude, Gemini, Cursor, and VS Code.

JFrog linked the campaign to attempted cPanel exploitation, but didn't confirm any downstream cPanel compromises.

Cathedral gets inside Anthropic.

The Washington Post reports that Cathedral, founded by former Doge staffers, reached Anthropic's business systems through third-party software.

The same bug leaks server memory.

JFrog calls it Heartbleed-style disclosure that needs only the factory default session.

Upload underscore progress.

Enabled equals on.

Laravel, via Securing Laravel, 10.

We have taken down a number of other systems as a precautionary measure, Wikimedia Spokesperson, via Newsweek, 11.

Independent of the application running on top of it, JFrog Security Research, 12.

Stores are exposed even when their own code is clean, Sanseg.

Completely unaware that an attacker is poisoning the physical pipes as they are being loaded onto the delivery truck.

Guy Kolovefsky from JFrog summarized this perfectly when he noted that a clean source repository tells you absolutely nothing about the built artifact you actually install.

Because the attackers didn't touch the source code.

Exactly.

Anything coiling underneath for tomorrow? Darvis Box lit up 26 names.

Datadog, Abercrombie, FROG, FFIV, Fortinet.

Setups building under a weak tape.

Ah, man.

Right? A good story isn't a good entry.

Anything coiling underneath for tomorrow? Darvis Box lit up 26 names.

Datadog, Abercrombie, FROG, FFIV, Fortinet.

Setups building under a weak tape.

Classic weekly cup and handle buy, right? And he's buying through resistance, which I told you, that's what we started doing at T-three in twenty thirteen when we had that crazy market run, and I had to unlearn this strategy because I was just getting chopped up, losing money in stocks that eventually went higher.

And we'll look at this JFrog, for example, nice little cup and handle on the weekly.

That's a classical, uh, classic technical buy point on the weekly chart.

Here it is on the daily chart, right? We see this area of chop.

So, uh, the pivot strategy and then VWAP reclaims intraday.

So let's talk about them a little bit.

We talked about this classical technical buy point in JFrog a minute ago.

Let's talk about the entry, uh, a little more closely, right? Earnings day gap low, right? Many traders are chasing this first day of earnings.

A service that fetches software libraries from the outside world on the model's behalf, keeps a copy, and hands them in.

The product is called Artifactory, made by a company called JFrog.

It is a little like an airlock, the single built-in pass-through in a sealed room, where supplies come in from outside without anyone stepping out.

On the 8th of May, during a training run, a model was given a spreadsheet task.

On the 4th of July, the sheer load from the agents took Artifactory down.

A security incident was opened the next day, against what OpenAI later described as a monitoring blind spot.

The flaw was disclosed to JFrog on the 6th, a fresh copy of the proxy was stood up, and the message board was wiped along with the old cache.

On the 7th of July, the evaluations resumed.

Well, story two is a security story, and it's for your platform team.

On Wednesday, security firm JFrog disclosed a critical vulnerability in LMCache, a caching layer used to speed up the LLM model servers.

It tracked-- It's tracked as CVE twenty twenty-six ten five one nine two and rated nine point eight out of ten.

Here's what's reported.

In multiprocess mode, the LMCache server accepts messages over a network socket and unpacks one message type with Python's pickle format before checking what kind of message it is.

One crafted message can run commands on the server.

On the official container images, JFrog says that process runs as root.

Versions oh.three.nine through oh.five.five are affected, and as of the disclosure, there's no fixed version.