Supply Chain - Hugo FixIt Bloghttps://pullsec.io/incident/supply-chain/This is my new Hugo FixIt siteHugo 0.164.0 & FixIt v1.0.0-alpha-mtcmp1fxenTue, 05 May 2026 15:10:00 +0200Xinference PyPI Supply Chain Attackhttps://pullsec.io/incident/supply-chain/xinference/Mon, 04 May 2026 08:23:14 +0200https://pullsec.io/incident/supply-chain/xinference/Incident<p>In my previous posts, I focused on kernel vulnerabilities and exploitation primitives such as use-after-free, page cache corruption, and metadata confusion.</p> <p>This case is different, is not a vulnerability in code is a compromise of trust.</p>