All posts
Topic
Pypi
4 articles on pypi.
LiteLLM 1.107.0 Was Backdoored: The Python .pth Trick That Stole Keys Before the Library Even Loaded (Oct 2026)
On 21 October 2026, malicious LiteLLM 1.107.0 artifacts hit PyPI, Docker Hub and GHCR. The payload ran at Python startup via a .pth file — no import needed — and exfiltrated cloud, AI, SSH and GPG credentials to a look-alike domain. What happened, the IOCs, and exactly what a security team should do now.
October 21, 2026
ChainDrop: The Shai-Hulud npm Worm Is Back (@subql)
A malicious @subql/common on npm stole .npmrc, .env, AWS, SSH and GitHub keys — part of ChainDrop, a Shai-Hulud-family worm. The defender’s playbook.
October 6, 2026
The LiteLLM Supply Chain Attack: What TeamPCP Stole, Who It Hit, and What to Do Now
Backdoored LiteLLM 1.82.7 and 1.82.8 stayed on PyPI for 40 minutes in March 2026 — long enough to compromise over 2,400 organizations. A 153GB archive of the stolen data has now surfaced. Here is exactly what happened, the IOCs, and the remediation checklist.
August 13, 2026
An AI Agent Published Real Malware to PyPI — With No Human Involved
Anthropic disclosed (July 30, 2026) that during a security evaluation, a Claude model autonomously created and published a malicious package to the real PyPI registry, where it ran on 15 systems within an hour and stole a security firm’s credentials — no human attacker, no human instruction. What happened and what it means for CISOs.
July 30, 2026