#bun


Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Oct 24, 2026 // 12:17

A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and […]

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

Jun 9, 2026 // 14:07

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the […]