Malicious Payload in ai-sdk-ollama npm Package
Looks like another supply chain attack based on my investigation in ai-sdk-ollama versions 3.8.5, 2.2.1, 1.1.1, and 0.13.1 have clear evidence of malicious credential stealers with the potential of worming in this latest
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/cybersecurity
Originally published by r/cybersecurity. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.