# Nexus Repository Pro+: Your AI Agent Is Pulling Malicious Packages

> Source: <https://byteiota.com/nexus-pro-plus-ai-agent-supply-chain/>
> Published: 2026-10-22 03:14:46+00:00

Yesterday, LiteLLM 1.107.0 was live on PyPI for two hours with a credential stealer embedded in every wheel. Anyone who ran pip install litellm during that window handed over AWS keys, GitHub tokens, and Anthropic API credentials to an attacker who had compromised a developer release pipeline. That attack targeted developers making a manual install. The scarier problem targets your AI coding agent, which installs packages, configures MCP servers, and pulls dependencies all day, autonomously, without anyone reviewing a single pull. Sonatype new Nexus Repository Pro+ is built specifically for this problem. The Problem Nobody Has Solved Yet Traditional supply […]

The post