A critical supply chain compromise (no CVE assigned) was disclosed affecting the Xinference Python ecosystem, allowing attackers to execute arbitrary code and fully compromise developer environments via malicious package versions. Due to the potential full system compromise and credential theft, immediate remediation is required. What is the Xinference PyPI Package Compromise? The issue originates from […] The post Xinference PyPI package compromise leads to full environment takeover appeared first on Orca Security .