09:00
2026-08-07
csoonline.com
ai-safety
Python package security in 2026: How supply chain attacks are targeting your AI development environment
On March 24, 2026, threat actor group TeamPCP compromised the PyPI distribution pipeline for LiteLLM, a Python package with 95 million monthly downloads, pushing malicious versions 1.82.7 and 1.82.8 t…