skip to content
astropod
sign in
news
Product news and updates from the Gastropod team.
tagged
pypi ×
LiteLLM 1.107.0 Carried a Credential Stealer on PyPI for 104 Minutes and in Docker Tags for Two and a Half Hours
2026-10-28 04:02:37 · Chris
vulnerability-intelligence
software-supply-chain-security
pypi
+3
python
oci-containers
credential-theft
MemTensor versions Contained a Credential Stealer Published With Tokens Taken From Its Own Release Pipeline
2026-09-27 23:42:33 · Chris
vulnerability-intelligence
software-supply-chain-security
npm
+3
pypi
credential-theft
ci-cd-security
A Hijacked AI Coding Assistant Session Installed a Poisoned PyPI Package and Spread Shai-Hulud to About 100 Repositories
2026-09-18 02:34:54 · Chris
vulnerability-intelligence
software-supply-chain-security
pypi
+3
python
ai-coding-assistants
shai-hulud
PyPI and GitHub Are Racing Against Time for Package Poisoning
2026-07-29 03:15:57 · Chris
software-supply-chain-security
vulnerability-intelligence
pypi
+3
python
package-poisoning
provenance
Paysafe/Skrill/Neteller fake SDK/Typosquat Campaign
2026-07-16 01:00:10 · last edited 2026-07-16 01:33:25 · Chris
vulnerability-intelligence
software-supply-chain-security
npm
+3
pypi
typosquatting
credential-theft
