16:00
2026-08-16
softwareseni.com
ai-safety
Slopsquatting and the New AI Supply Chain Attack Surface
The TeamPCP campaign in March 2026 used a stolen token to cascade across five ecosystems in eight days, publishing backdoored LiteLLM versions 1.82.7 and 1.82.8 on PyPI that swept LLM API keys, cloud …