The AI Toolchain as Attack Surface
LiteLLM's PyPI release was backdoored on October 21 with a credential stealer that targets AI developer tokens specifically — Claude Code, Cursor, Copilot, LLM provider API keys — alongside the usual cloud credential haul. It's the second major supply chain hit on LiteLLM in 2026, and the .pth file technique used here is the one detail every Python developer should understand.
Read more →