📰 Sublime Text 4213 Code Editor Adds Python 3.14, File Icon Themes

Sublime Text 4213 updates its plugin runtime to Python 3.14, adds file icon themes, Git improvements, and several Linux-specific fixes.

🔗 Source: https://linuxiac.com/sublime-text-4213-code-editor-adds-python-3-14-file-icon-themes/

#git #linux #python

📰 Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS.According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions.

🔗 Source: https://thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html

#linux #python

📰 Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory.Affected versions sent the client secret, the authorization code, and the PKCE proof key to a token endpoint the attacker controlled. The fix is in versions 1.30.0 and.

🔗 Source: https://thehackernews.com/2026/09/official-mcp-python-sdk-flaw-can-let.html

#python

📰 Python 3.15 Released With Experimental JIT Compiler Running Faster

Python 3.15 is out today as the newest annual feature release for the Python programming language...

🔗 Source: https://www.phoronix.com/news/Python-3.15-Released

#python

📰 SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,.

🔗 Source: https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html

#python

📰 n8n saved me more time this year than any AI tool, and most of my workflows don't use AI at all

Before I started using n8n, most of my automations were Python or Bash scripts that ran through cron jobs. They got things done, although adding something new or figuring out why a script stopped working took more effort than I wanted. I only have a working knowledge of Python, and even when an AI tool helps me write the code, I still have to understand enough of it to maintain the automation. With n8n, I can follow the workflow on a canvas,...

🔗 Source: https://www.xda-developers.com/n8n-saved-more-time-year-ai-tool-workflows-dont-use-ai/

#python

📰 LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the.

🔗 Source: https://thehackernews.com/2026/10/litellm-compromised-in-supply-chain.html

#python

📰 Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open.The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.

🔗 Source: https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html

#python

📰 Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli.Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's memory, potentially.

🔗 Source: https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html

#python

📰 Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package."On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness repository which inadvertently contained the master key to a deployment of.

🔗 Source: https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html

#python