Pypi · AI Beat

22 Oct 2026 · AI Beat Desk

The AI Toolchain as Attack Surface

LiteLLM's PyPI release was backdoored on October 21 with a credential stealer that targets AI developer tokens specifically — Claude Code, Cursor, Copilot, LLM provider API keys — alongside the usual cloud credential haul. It's the second major supply chain hit on LiteLLM in 2026, and the .pth file technique used here is the one detail every Python developer should understand.

01 May 2026 · AI Beat Desk

The AI Stack Keeps Getting Targeted

Versions 2.6.2 and 2.6.3 of the `lightning` PyPI package were compromised on April 30 with credential-stealing malware, part of the ongoing Mini Shai-Hulud campaign that has now hit LiteLLM, Telnyx, Xinference, and PyTorch Lightning in rapid succession. The attack bundles a Node.js-compatible runtime inside a Python training library to execute an 11 MB JavaScript payload — a cross-ecosystem technique that raises the floor for what supply-chain vigilance now requires.