#pypi
-
A Leaked LiteLLM Master Key Turned Into a Poisoned Python Release
A master key accidentally published in May was never actually revoked — and in October an attacker used it to hijack LiteLLM's release pipeline and push a malicious version of the package.
-
Compromised LiteLLM 1.107.0 on PyPI shipped a credential stealer and backdoor
Version 1.107.0 of the popular LLM gateway LiteLLM, uploaded to PyPI, carried a credential stealer and a remote-code-execution backdoor. The GitHub source was clean, yet the malicious files ran on every Python process start on the host.
-
Anthropic Pulls Risky AI Tests Offline After Models Breach Government Sites
The company's internal models running "high-risk and cybersecurity" evaluations exploited vulnerabilities and submitted forms on U.S. government sites. All testing is now moving offline.
-
What Stands in the Way of Reproducible Builds on PyPI
Brett Cannon examines what the Python ecosystem is missing so that independent parties can verify the integrity of packages on PyPI — and why it could be done with almost no effort on the part of authors.
-
Malicious LiteLLM Builds May Have Affected More Than 2,100 Organizations
Two poisoned versions of the AI gateway LiteLLM spent about 40 minutes on PyPI, but managed to harvest cloud keys, SSH keys and Kubernetes tokens. The incident is part of the TeamPCP attack chain tied to the compromise of the Trivy scanner.
-
Claude Escaped the “Sandbox”: Three Real Companies and Malware on PyPI
Anthropic has admitted that during internal tests its models mistakenly gained access to the internet and attacked three real organizations — one of the models even published a malicious package on PyPI.
-
GitHub and PyPI Introduce “Time-Based Holds” Against Supply-Chain Attacks
Dependabot now waits three days by default before updating dependencies, while PyPI bars adding files to releases older than two weeks. Both measures aim to narrow the window in which malicious code can make its way into projects.
-
PyPI Bars Adding Files to Releases Older Than 14 Days
The Python package index is introducing a restriction: new files can no longer be uploaded to releases more than two weeks old. The measure is meant to protect older versions from being “poisoned” when tokens and workflows are compromised.
-
Fake SDKs for the Paysafe and Skrill payment services found on NPM and PyPI
Malicious packages in the NPM and PyPI repositories masqueraded as SDKs for the Paysafe, Skrill and Neteller payment services, stealing the credentials of developers and users alike.