{"title":"PyPI advisories","description":"Python package and PyPI supply-chain advisories: hijacked releases, malicious packages and poisoned dependencies.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/litellm-pypi-docker-compromise/","title":"LiteLLM 1.107.0: poisoned PyPI and Docker release built from a lookalike repository","url":"https://vulnpocalypse.dev/advisories/litellm-pypi-docker-compromise/","date":"2026-11-11","summary":"Attackers with stolen gh CLI tokens shipped malware as LiteLLM 1.107.0 on PyPI, Docker Hub and GHCR. Check before running Python, then rebuild and rotate.","tags":["supply-chain","pypi","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/litellm-11070-on-pypi-and-docker-was-backdoored-with-a-credential-stealer-and-re/","title":"LiteLLM 1.107.0 on PyPI and Docker was backdoored with a credential stealer and remote code loader","url":"https://vulnpocalypse.dev/advisories/litellm-11070-on-pypi-and-docker-was-backdoored-with-a-credential-stealer-and-re/","date":"2026-11-11","summary":"LiteLLM 1.107.0 on PyPI and official Docker images ran a credential stealer on every Python start; roll back to 1.106.2 and rotate all reachable secrets.","tags":["supply-chain","pypi","ai-tools","open-source","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/emudhra-intermediate-ca-compromise/","title":"eMudhra intermediate CA compromise: eight CA keys were guessable in 256 tries, and non-browser clients still need updates","url":"https://vulnpocalypse.dev/advisories/emudhra-intermediate-ca-compromise/","date":"2026-11-11","summary":"Eight eMudhra intermediate CA keys were guessable. Browsers block them; update CA bundles and runtimes, and replace TLS certs under emSign ECC Root CA - G3.","tags":["ecosystem","endpoint","nodejs","pypi","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/teampcp-trivy-litellm-supply-chain/","title":"TeamPCP campaign (CVE-2026-33634): Trivy, KICS, LiteLLM and Telnyx turned into credential stealers","url":"https://vulnpocalypse.dev/advisories/teampcp-trivy-litellm-supply-chain/","date":"2026-11-11","summary":"Poisoned Trivy and KICS actions and images, LiteLLM 1.82.7/1.82.8 and Telnyx 4.87.1/4.87.2 stole CI and developer secrets. Check, then rotate.","tags":["supply-chain","github-actions","pypi","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/jfrog-says-new-threat-hub-maps-vulnerability-blast-radius/","title":"JFrog says new Threat Hub maps vulnerability blast radius","url":"https://vulnpocalypse.dev/advisories/jfrog-says-new-threat-hub-maps-vulnerability-blast-radius/","date":"2026-11-10","summary":"JFrog says its new Threat Hub turns vulnerability intelligence into blast radius analysis; no new flaw is disclosed, so verify claims yourself.","tags":["ai-tools","ai-tools","npm","pypi"]},{"id":"https://vulnpocalypse.dev/advisories/litellm-supply-chain-compromise-2026-11/","title":"Malicious litellm 1.107.0 shipped a credential stealer and RAT through PyPI and Docker","url":"https://vulnpocalypse.dev/advisories/litellm-supply-chain-compromise-2026-11/","date":"2026-11-04","summary":"Malicious litellm 1.107.0 on PyPI and Docker ran a credential stealer and RAT at Python startup. Last safe pre-incident release is 1.106.2.","tags":["supply-chain","pypi","ai-tools","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/langflow-critical-auth-bypass-and-rce-flaws-upgrade-to-1130/","title":"Langflow critical auth bypass and RCE flaws, upgrade to 1.13.0","url":"https://vulnpocalypse.dev/advisories/langflow-critical-auth-bypass-and-rce-flaws-upgrade-to-1130/","date":"2026-11-03","summary":"IBM disclosed four Langflow flaws, two rated critical, affecting versions 1.0.0 through 1.12.8; upgrade Langflow to version 1.13.0.","tags":["ai-tools","ai-tools","pypi","open-source","web"]},{"id":"https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/","title":"Hacktober 2026: PHP2Shell, Node.js and LiteLLM fixes, Binance probe","url":"https://vulnpocalypse.dev/advisories/hacktober-2026-php2shell-nodejs-and-litellm-fixes-binance-probe/","date":"2026-11-02","summary":"October 2026 brought unrelated incidents, including PHP2Shell, Node.js patches and a malicious LiteLLM 1.107.0; update runtimes and review credentials.","tags":["ai-tools","php","nodejs","pypi","npm","github-actions","ai-tools","crypto","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/malware-advisory-flood-october-2026/","title":"Late-October 2026 malware advisory flood: 112 GitHub malware advisories for 96 npm and 10 PyPI packages in three days","url":"https://vulnpocalypse.dev/advisories/malware-advisory-flood-october-2026/","date":"2026-11-02","summary":"GitHub published 112 malware advisories for 106 npm and PyPI packages from 26 to 28 Oct 2026: miners, stealers, beacons. Grep lockfiles for the named packages.","tags":["supply-chain","npm","pypi"]},{"id":"https://vulnpocalypse.dev/advisories/mcp-2026-atlassian-sdk-opencode/","title":"MCP flaws in 2026: mcp-atlassian SSRF and file write to RCE, MCP Python SDK OAuth credential theft, and OpenCode code execution at sign-in","url":"https://vulnpocalypse.dev/advisories/mcp-2026-atlassian-sdk-opencode/","date":"2026-11-02","summary":"MCP servers and clients had 2026 flaws giving RCE or OAuth credential theft. Update mcp-atlassian to 0.17.0, mcp to 1.30.0 or 2.2.0, and OpenCode to 1.18.33.","tags":["ai-tools","ai-tools","pypi","open-source"]},{"id":"https://vulnpocalypse.dev/advisories/hades-pypi-ensmallen-bioinformatics/","title":"Hades campaign: ensmallen 0.8.101 and 28 more PyPI packages scraped CI runner memory and threatened to wipe home directories","url":"https://vulnpocalypse.dev/advisories/hades-pypi-ensmallen-bioinformatics/","date":"2026-11-02","summary":"Hijacked releases of ensmallen and other graph ML, bioinformatics and AI packages stole CI secrets on import. Kill gh-token-monitor before revoking tokens.","tags":["supply-chain","pypi","github-actions","ci-cd","ai-tools"]},{"id":"https://vulnpocalypse.dev/advisories/trapdoor-npm-pypi-crates-stealer/","title":"TrapDoor: 34 fake crypto, AI and dev-tool packages on npm, PyPI and crates.io stole wallets and secrets and planted CLAUDE.md and .cursorrules","url":"https://vulnpocalypse.dev/advisories/trapdoor-npm-pypi-crates-stealer/","date":"2026-11-02","summary":"34 lure packages on npm, PyPI and crates.io stole keys, wallets and cloud credentials and planted AI-agent rule files. Check for the names and rotate secrets.","tags":["supply-chain","npm","pypi","open-source","ai-tools","crypto"]},{"id":"https://vulnpocalypse.dev/advisories/microsoft-durabletask-pypi-compromise/","title":"Microsoft durabletask 1.4.1 to 1.4.3 on PyPI: import-time cloud credential stealer with a systemd backdoor and geo-targeted wiper","url":"https://vulnpocalypse.dev/advisories/microsoft-durabletask-pypi-compromise/","date":"2026-11-02","summary":"durabletask 1.4.1, 1.4.2 and 1.4.3 stole cloud, Kubernetes and Vault secrets on import on Linux. Check for pgsql-monitor.service, then rotate and rebuild.","tags":["supply-chain","pypi","cloud","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/","title":"PyTorch Lightning 2.6.2 and 2.6.3 on PyPI ran a Bun-based credential stealer on import; intercom-client 7.0.4 followed","url":"https://vulnpocalypse.dev/advisories/pytorch-lightning-pypi-compromise/","date":"2026-11-02","summary":"lightning 2.6.2 and 2.6.3 on PyPI stole credentials on import and spread via GitHub and npm. Check installs, rotate secrets, use 2.6.1 or 2.6.4+.","tags":["supply-chain","pypi","npm","php","ai-tools","ci-cd"]},{"id":"https://vulnpocalypse.dev/advisories/elementary-data-pypi-ghcr-backdoor/","title":"elementary-data 0.23.3 backdoor: GitHub Actions comment injection published an infostealer to PyPI and GHCR","url":"https://vulnpocalypse.dev/advisories/elementary-data-pypi-ghcr-backdoor/","date":"2026-11-02","summary":"elementary-data 0.23.3 on PyPI and its GHCR image ran a credential stealer via elementary.pth. Find 0.23.3, move to 0.23.4 or later, and rotate secrets.","tags":["supply-chain","pypi","github-actions","ci-cd","cloud"]},{"id":"https://vulnpocalypse.dev/advisories/litellm-sql-injection-cve-2026-42208/","title":"LiteLLM proxy SQL injection CVE-2026-42208: unauthenticated reads of virtual keys and provider credentials","url":"https://vulnpocalypse.dev/advisories/litellm-sql-injection-cve-2026-42208/","date":"2026-11-02","summary":"A pre-auth SQL injection in LiteLLM proxy 1.81.16 to 1.83.6 exposes API keys and provider credentials. Exploited. Upgrade to 1.84.0 or later and rotate keys.","tags":["ai-tools","ai-tools","pypi"]}]}