skip to content
astropod
sign in
news
Product news and updates from the Gastropod team.
tagged
pypi ×
A Hijacked AI Coding Assistant Session Installed a Poisoned PyPI Package and Spread Shai-Hulud to About 100 Repositories
2026-09-18 02:34:54 · Chris
vulnerability-intelligence
software-supply-chain-security
pypi
+3
python
ai-coding-assistants
shai-hulud
PyPI and GitHub Are Racing Against Time for Package Poisoning
2026-07-29 03:15:57 · Chris
software-supply-chain-security
vulnerability-intelligence
pypi
+3
python
package-poisoning
provenance
Paysafe/Skrill/Neteller fake SDK/Typosquat Campaign
2026-07-16 01:00:10 · last edited 2026-07-16 01:33:25 · Chris
vulnerability-intelligence
software-supply-chain-security
npm
+3
pypi
typosquatting
credential-theft
