Topic
2 articles
CyberSecureToday covers PyPI across 2 articles published between 30 Sep 2026 and 23 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on PyPI most often intersect with LiteLLM, Software Supply Chain and Docker Hub, with Technology, Cloud & SaaS the most affected sector. The most recent story, “LiteLLM Pipeline Hijacked in Software Supply Chain Attack Deploying InfoStealer and RAT”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
KubernetesAttackers hijacked LiteLLM release workflows using leaked GitHub CLI OAuth tokens, publishing backdoored packages to PyPI and Docker Hub executing LLMjacking.
Threat IntelA sophisticated typosquatted Python package targets AI engineering pipelines, masquerading as vLLM inference worker daemons to exfiltrate proprietary model weights.