---
title: "#Open Source - AFeng Blog"
url: "https://afengblog.com/en/tag/open-source"
language: "en"
total: 1
---

# Tags: Open Source

- [Black October 2026 — How PHP2Shell and LiteLLM Exposed the AI Open-Source Crisis](https://afengblog.com/en/blog/black-october-2026-php2shell-litellm-ai-open-source.html) (2026-11-03 · Security & Privacy): Between October 17 and 30, 2026, 14-year-old PHP2Shell RCEs, Google Brotli out-of-bounds writes, TianoCore UEFI flaws, eMudhra's single-byte CA key, and the 101-minute LiteLLM supply-chain attack detonated concurrently. Here is how frontier AI models compressed decade-old bug hunting into a single week—and pushed a 13-developer open-source foundation to the brink.
