LuaRocks security incident: luarocks.org/security-inc...
To the best of my knowledge my mirror (at loadk.com) was not directly affected beyond serving the 3 malicious packages.
Thankfully my update code never parses rockspecs, only manifests - plus I always use "t".
luarocks.org
Security Incident September 2026 - LuaRocks