Unverified50% confidenceFactExact time
Installer packages (.pkg) signed with affected certificates will be unable to execute installation after February 1, 2027.
1
Sources
50%
Confidence
Long-term
Relevance
10/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDevelopers must re-sign all affected installer packages with the new certificate before February 1, 2027.71% similarUnverified2026年3月24日，两个恶意版本的 LiteLLM（1.82.7 和 1.82.8）被推送到 PyPI，上线约40分钟后被撤下58% similarUnverifiedIt is recommended to use package-lock.json or pnpm-lock.yaml to precisely lock the actually installed versions, and to submit upgrade PRs on a scheduled basis via tools such as Dependabot or Renovate.56% similarUnverified2022年起工业和信息化部要求所有小程序完成ICP备案，开发者需提交真实身份信息和手写签名承诺书，电子签版本会被退回54% similarUnverifiednpm install will automatically update dependencies when the lockfile is inconsistent with package.json, which may introduce untested versions.51% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/965946API
curl https://kongchang.com/api/v1/knowledge/claims/965946MCP
get_claim(id=965946)