PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Celebrating our 2025 open-source contributions

blog.trailofbits.com | blog | #supply-chain | #open-source | #rust | #cryptography | #packaging | #llvm | #trail-of-bits | #sigstore
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits engineers merged 375+ pull requests into 90+ open-source projects in 2025, including Sigstore rekor-monitor, Rust compiler/Clippy, pyca/cryptography, hevm, PyPI Warehouse, and pwndbg.
Published
Collected

Related coverage

blog · blog.trailofbits.com
1Password's AI patching benchmark is misleading
Trail of Bits says 1Password's FLAWED benchmark misstates AI patch quality, mixing wrong-fix prompts and no-test trials into a 26% clean-fix headline, and ships two agent skills for better fixes.
blog · blog.trailofbits.com
Rust-proof your code with our new Testing Handbook chapter
Trail of Bits added a Rust testing chapter to its Testing Handbook: Miri, property testing, Clippy, zeroization, Kani model checking and dependency vetting, plus the rust-review Claude Code plugin.
research · eshard.com
Obfuscation of Rust code with LLVM
Option 1: Technical & Tutorial Focused (Best for SEO) Learn how to obfuscate Rust code using OLLVM. This guide walks you through rebuilding the Rust LLVM toolchain, building the obfuscator-llvm pass-plugin, and applying transformations like control flow flattening and bogus control flow.
blog · blog.trailofbits.com
Your AI agent fixed the bug, but what else did it change?
We’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents.
blog · blog.trailofbits.com
Package managers have an integrity problem
# Package managers have an integrity problem Keegan Ryan October 14, 2026 supply-chain, cryptography, ecosystem-security Page content * Simulating malicious package repositories * HTTPS is...
blog · blog.trailofbits.com
SequenceHash: multihashing for the rest of us
We're releasing SequenceHash and its sister function SequenceMAC, a pair of related hash constructions that bring secure multihashing to developers using hash functions other than Keccak.
Back