A packaging error in Anthropic’s Claude Code exposed over 500,000 lines of source code. The post Claude Code Leak Exposes AI Supply Chain Threats...

A packaging error in Anthropic’s Claude Code exposed over 500,000 lines of source code. The post Claude Code Leak Exposes AI Supply Chain Threats...

A compromised Axios package briefly deployed a cross-platform RAT, highlighting supply chain risk. The post Axios npm Attack Deploys Cross-Platform...

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to...

LiteLLM offers an AI open source project used by millions that was infected by credential harvesting malware. This article has been indexed from...

LiteLLM had obtained two security compliance certifications via Delve and fell victim to some horrific credential-stealing malware last week. This...

LiteLLM had obtained two security compliance certifications via Delve and fell victim to some horrific credential-stealing malware last week. This...

TeamPCP backdoored LiteLLM v1.82.7–1.82.8, likely via Trivy CI/CD, adding tools to steal credentials, move in Kubernetes, and keep persistent...

SentinelOne AI stopped a LiteLLM supply chain attack in seconds, blocking malicious code automatically without human intervention. SentinelOne’s...

AI hiring fraud lets attackers bypass screening and gain insider access. The post Insider Threats Rise with North Korean AI Hiring Fraud Schemes...