Python
11 malicious packages published on 2026-11-07 (pypi 10, npm 1)
Including: qzc690385, qzc690383, qzc690382, genblaze-fal, pulumi-doppler, genblaze-atlascloud, dsh-notify-focus, reqnests…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
33 malicious packages published on 2026-11-06 (npm 32, pypi 1)
Including: @cherrydotfun/miniapp-sdk, hello-bat-fwi9, tailwind-animationfound, modelsdesk, kampodine, automic-style-engine, monobomber, monopw…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
PyPI's redesigned project pages with clearer security signals are now live
In July, we announced a series of planned updates to the PyPI user interface. Shaped by user research with members of the Python community , the updates aim to improve how we surface security signals and display package details. We're pleased to share that this work is now comple
56 malicious packages published on 2026-11-05 (npm 52, pypi 4)
Including: itc-actors-api, talk-lang, plain-lang, @db-tools/main-app, test1817, @gemshell/win32-x64, dsh-purge, mcp-teamviewer…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
Deleting a leaked key from your repo doesn't protect you
A leaked admin key on GitHub, deleted within hours, still led to a breach months later at LiteLLM. Learn why Git history keeps secrets and why you have to rotate. Category: News
Surviving cybersecurity until the end of 2026
After Binance, LiteLLM, PHP2Shell and eMudhra, here are six practices and a checklist to limit what the next compromise can reach before 2027. Category: News
18 malicious packages published on 2026-11-03 (npm 16, pypi 2)
Including: arbkit, bandkit, jailbreak-code, txnforge, print-hello-world-test-temp, @mntv-analysis/ui, @user-interface-common/common-styles, web-pixels-manager…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
7 malicious packages published on 2026-11-01 (npm 4, pypi 2, rubygems 1)
Including: dsh-screenshot-native, atlassian-wallboard-plugin, macs-shoaibs-pro17, privacypass-py, hs-framework, @axon-web/icons, pystr-codec
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
7 malicious packages published on 2026-10-31 (pypi 5, npm 2)
Including: @mamans2973/maman, skills-analyzer, md-to-slides, doctreelstm, is-it-ai, multi-convert, local-commander-agent
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
27 malicious packages published on 2026-10-30 (npm 23, pypi 4)
Including: @pcb-dp/qa-commons, @sxm-content-creators/tools-ds, vas-tops2-reportingui, vas-tops2-core-clients-search, vas-tops2-core-client-cleanup-ui, @tops2/digital-assistant-ui, vas-tops2-core-property-search, vas-tops2-digital-assistant-ui…
What to do: snare checks lockfiles and installs against these automatically — `snare deps`.
More from Python
43 malicious packages published on 2026-10-29 (npm 40, pypi 3)
21 malicious packages published on 2026-10-28 (npm 20, pypi 1)
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
27 malicious packages published on 2026-10-27 (npm 25, pypi 2)
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
Authlib: empty signatures validation in JWS JSON deserialization
Agno: Arbitrary code execution via eval() on field_type in FunctionCall
MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
53 malicious packages published on 2026-10-26 (npm 47, pypi 6)
15 malicious packages published on 2026-10-25 (npm 13, pypi 2)
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
44 malicious packages published on 2026-10-23 (pypi 25, npm 19)
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack
eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update
LiteLLM release pipeline hacked to distribute info-stealer malware
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
LiteLLM Compromised, Steals Credentials
LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
LiteLLM compromised again: infostealer and RAT found in version 1.107.0