LIVE FEED
FIRST LOOK OpenAI Expands ChatGPT Into Family and Caregiver Households // FIRST LOOK Iroh Launches Mesh LLM for Distributed AI Across Peer Nodes // HIGH HalluSquatting Exploits AI Hallucinations for Botnet RCE // CRITICAL OpenClaw AI Assistant Flaws Enable WhatsApp-to-Host RCE // FIRST LOOK Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap // FIRST LOOK Ghostcommit PoC Embeds Prompt Injection in PNG to Steal Repo Secrets // FIRST LOOK Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery // FIRST LOOK FableCut Ships AI-Drivable Browser Video Editor via MCP and REST // FIRST LOOK AI Agents Emerge as a New Identity Class Orgs Must Secure // HIGH CVE-2026-12958: GhostApproval Symlink Attack on Coding Agents //
MALICIOUS-PACKAGE

Malicious-Package

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning AI Security Tools Security Operations
node-ipc Supply Chain Backdoor Steals Cloud and AI Credentials

node-ipc Supply Chain Backdoor Steals Cloud and AI Credentials

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 7.2 The Hacker News

Three versions of the widely-used node-ipc npm package were found to contain obfuscated stealer/backdoor payloads published by an unauthorised maintainer account. The malware harvests 90 categories of developer secrets — including Claude AI and Kiro IDE configurations, AWS, Azure, and GCP credentials — and exfiltrates them via HTTPS and DNS tunnelling to an attacker-controlled domain. The compromise is notable for bypassing npm lifecycle hooks entirely and, in one version, targeting a specific developer via pre-computed SHA-256 fingerprinting.

PyTorch Lightning Package Backdoor Steals Developer Credentials

PyTorch Lightning Package Backdoor Steals Developer Credentials

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 BleepingComputer

A malicious version of PyTorch Lightning (v2.6.3) was published to PyPI, embedding a hidden execution chain that silently downloads a JavaScript runtime and executes a heavily obfuscated credential-stealing payload dubbed 'ShaiWorm'. The attack targeted AI/ML developers who use this popular deep learning framework, exposing cloud credentials, API keys, browser-stored secrets, and GitHub tokens. The package has since been reverted to a safe version, but any developer who imported the compromised version should rotate all secrets immediately.

litellm Supply Chain Attack: PyPI .pth File Injection

litellm Supply Chain Attack: PyPI .pth File Injection

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Schneier on Security

A malicious supply chain attack was discovered in litellm version 1.82.8, a widely-used Python library that serves as a unified interface for interacting with large language model APIs. The compromised package contained a hidden .pth file executing arbitrary code on every Python interpreter startup, meaning any developer or AI system relying on litellm could be silently compromised without triggering an explicit import. Given litellm's central role in LLM-powered application stacks, this attack vector poses significant risk to AI pipeline integrity, credential theft, and downstream model infrastructure.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.