PHP, Node.js and LiteLLM flaws take down government sites

Government websites worldwide went offline after AI found critical vulnerabilities in PHP, prompting the NSA to urge immediate patching or shutdown. Node.js patched four high-severity flaws, while LiteLLM was compromised via PyPI, Docker Hub and GHCR with an info stealer and RAT.

• NSA advises patching PHP or taking systems offline
• Node.js fixed four flaws, one enabling RCE
• Malicious LiteLLM packages stole cloud and AI credentials
• Certificate authority eMudhra had private keys compromised