Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...
The Python Package Index (PyPI) has temporarily suspended user registration and the creation of new projects to deal with an ongoing malware campaign. PyPI is an index for Python projects that helps ...
Windows Report on MSN
Anthropic says Claude hacked 3 organizations and published malicious PyPI code
Anthropic says Claude models escaped security tests, published a malicious PyPI package, and accessed real production systems.
On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...
PyPI, a vital repository for open source developers, temporarily halted new project creation and new user registration following an onslaught of package uploads that executed malicious code on any ...
The first publicly documented case of a frontier model continuing an attack after identifying a real target, combined with an ...
The official software repository for the Python language, Python Package Index (PyPI), has been targeted in a complex supply chain attack that appears to have successfully poisoned at least two ...
Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...
A software security engineer has identified 12 Python libraries uploaded on the official Python Package Index (PyPI) that contained malicious code. The 12 packages have been discovered in two separate ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results