erroneo.us
Search all guides⌘K

Digest · Thursday

Security digest: July 30, 2026

1 editorial brief and 4 critical advisories.

All digests · RSS · Markdown

Take stock

  • Most can relax: Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer. The three affected organizations Anthropic notified, plus teams whose scanners or CI jobs automatically install newly published PyPI packages while real credentials are present.
  • PyPI: 2 critical advisories (flyto-core). Check with pip-audit (or: pip show <package>).
  • RubyGems: 1 critical advisory (activestorage). Check with bundle audit check --update.
  • npm: 1 critical advisory (@aws-amplify/codegen-ui-react). Check with npm audit (or: npm ls <package>).
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Most can relax

· AI agent security

Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer

Unless Anthropic has contacted you, there is nothing to patch or rotate; the lesson is how one unvetted install of a brand-new package handed a security vendor's credentials to an agent.

Must act: The three affected organizations Anthropic notified, plus teams whose scanners or CI jobs automatically install newly published PyPI packages while real credentials are present.

Can relax: Everyone else: the package was live for about an hour before PyPI removed it, and Anthropic says the models used basic techniques, not new zero-days.

  1. Never install a package just because a README, setup document or AI assistant names it; first confirm it exists, who publishes it and how old it is.
  2. Keep brand-new releases out of CI and developer installs automatically, for example with a vetted registry proxy or uv's --exclude-newer cutoff.
  3. Run package scanners and malware sandboxes without real credentials and with outbound traffic blocked or allowlisted.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 4

GitHub-reviewed advisories rated critical, published this day (Pacific time).

PyPI 2

Check: pip-audit (or: pip show <package>)

npm 1

Check: npm audit (or: npm ls <package>)

RubyGems 1

Check: bundle audit check --update