Tag: PyPI
Stolen AI gateway packages exposed secrets at 2,100 organizations
A CloudSEK dataset maps the March LiteLLM poisoning campaign to secret exposure at thousands of organizations.
PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials
The compromise cascaded from PyPI to npm to Packagist when a transitive dependency of pyannote-audio introduced the malicious Lightning package…