LIVE FEED
HIGH AI-Powered Vishing Lets Fraudsters Bypass Help Desks // HIGH AI Agents Hijacked via Prompt Injection and Malicious Skills // HIGH Aokigahara Infostealer Targets Claude, Copilot, and Cursor Credentials // CRITICAL LiteLLM 1.107.0 Supply Chain Attack Steals AI Credentials // FIRST LOOK OpenAI Trains Frontier Models in Air-Gapped Offline Environments // HIGH Samsung TV Found Sending Audio to OpenAI Without Consent // CRITICAL LiteLLM PyPI Supply Chain Attack Drops Info-Stealer Malware // FIRST LOOK Walmart Opens Platform to AI Shopping Agents With Spend Controls // CRITICAL AI Agent ARTEX Weaponised in ConnectWise Supply Chain Breach // FIRST LOOK 1Password Launches Agent Login Tool That Shields Credentials //
NPM-WORM

Npm-Worm

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
DPRK npm Supply Chain Worm Uses Web3 C2 to Steal Cloud Keys

DPRK npm Supply Chain Worm Uses Web3 C2 to Steal Cloud Keys

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.5 Palo Alto Unit 42

North Korea-affiliated threat actors have escalated software supply chain attacks by embedding a self-propagating npm worm, ChainDrop, across over 400 packages to harvest ephemeral cloud IAM credentials and CI/CD tokens. The campaign introduces Web3-based command-and-control via EtherHiding smart contracts, enabling attackers to dynamically update exfiltration endpoints across entire botnets without altering malware binaries. Targeted projects include AI frameworks such as Mastra AI, raising direct concerns for AI development pipelines and their cloud infrastructure.

TeamPCP Supply Chain Campaign Poisons xinference PyPI

TeamPCP Supply Chain Campaign Poisons xinference PyPI

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.5 SANS Internet Storm Center

The TeamPCP supply chain campaign resumed after a 26-day pause with three concurrent compromises targeting Checkmarx KICS (Docker Hub), xinference (a popular AI inference PyPI package), and a cascading compromise of Bitwarden CLI via poisoned CI/CD dependencies. The xinference poisoning is directly AI-security relevant as it targets a widely used LLM/ML model serving framework, while the broader campaign demonstrates sophisticated supply chain attack methodologies that increasingly intersect with AI tooling. The CanisterSprawl npm worm adds credential-harvesting infrastructure that could further compromise AI development pipelines.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.