# Railway breach exposes decrypted environment variables; Railway tells users to rotate keys > Source: > Published: 2026-10-22 21:45:39+00:00 # Railway breach exposes decrypted environment variables; Railway tells users to rotate keys Railway says the breach is part of a wider campaign aimed at compromising AI inference providers. Three more stories inside. Today's lead is Railway's breach. It leads because it's the most urgent item today: if anything you run is deployed on Railway, rotate its keys before you read the rest. Also today: a backdoored LiteLLM release on PyPI stole saved tokens for Claude Code, Cursor and Codex; Claude Security now scans connected repositories continuously and ships an API, in beta for Enterprise customers; and Omnara released an open-source, self-hostable alternative to Claude Managed Agents. **In this issue** • [Railway breach exposes decrypted environment variables; Railway tells users to rotate keys](https://www.thenewway.ai/railway-breach-exposes-decrypted-environment-variables/#railway-breach-exposes-decrypted-environment-variables-railway-tells-users-to-rotate-keys) • [A backdoored LiteLLM package on PyPI stole saved tokens for Claude Code, Cursor and Codex](https://www.thenewway.ai/railway-breach-exposes-decrypted-environment-variables/#a-backdoored-litellm-package-on-pypi-stole-saved-tokens-for-claude-code-cursor-and-codex) • [Claude Security adds continuous scanning and an API for Enterprise customers](https://www.thenewway.ai/railway-breach-exposes-decrypted-environment-variables/#claude-security-adds-continuous-scanning-and-an-api-for-enterprise-customers) • [Omnara ships an open-source, self-hostable alternative to Claude Managed Agents](https://www.thenewway.ai/railway-breach-exposes-decrypted-environment-variables/#omnara-ships-an-open-source-self-hostable-alternative-to-claude-managed-agents) ## What changed this week ### Railway breach exposes decrypted environment variables; Railway tells users to rotate keys Railway said Wednesday that an unauthorized party accessed systems holding customer environment variables, and got the decrypted contents of some of them, including API keys and database credentials. Railway says its initial analysis suggests the impact may be limited to a subset of users, but it is asking everyone to act. It paused all deployments, told every user to rotate every key and credential stored on the platform immediately, and said it believes the breach is part of a wider campaign against platform companies aimed at compromising AI inference providers. Railway followed up Thursday with rotation guides for GCP and AWS keys specifically. On Reddit, r/ClaudeAI and r/vibecoding users who host Claude-built apps on Railway are already reporting harvested keys. ### A backdoored LiteLLM package on PyPI stole saved tokens for Claude Code, Cursor and Codex LiteLLM, the Python library many apps use to reach different AI models, shipped version 1.107.0 on PyPI with a credential stealer and a backdoor in every build, security firm SafeDep found. The stealer targets AI coding tools: saved tokens for Claude Code, Cursor, Copilot, Codex, Aider, Goose and Zed, plus SSH keys, cloud credentials and CI secrets. The attacker got in by stealing three LiteLLM developers' GitHub CLI credentials. PyPI pulled the release under two hours later; 1.106.2 is clean. ### Claude Security adds continuous scanning and an API for Enterprise customers Claude Security, Anthropic's automated code-vulnerability scanner, now watches connected repositories continuously instead of waiting for a scheduled scan, and closes a finding once the fix lands, reopening it if the bug resurfaces. A new API and MCP connector let teams pull findings into their own tools. It's in public beta today for Claude Enterprise customers; each organization gets $25,000 in monthly usage credits through December. Anthropic says organizations have used the original April beta to find over a million vulnerabilities. ### Omnara ships an open-source, self-hostable alternative to Claude Managed Agents Omnara shipped an open-source, self-hostable alternative to Claude Managed Agents (Anthropic's hosted service for running agents) and OpenAI's Agents API, licensed Apache 2.0. It runs agents against any model, on your own machine or a managed sandbox, with tools, secrets, permissions and streaming built into one API. A CLI and web chat let you message a running agent instead of only firing it and waiting. This is the maker's own description, not an independent report of running it. ## Also worth your time Know someone who'd want this in their inbox? Forward it — that's how this grows. And if we got something wrong, or you think we buried the real story today, hit reply. A person reads every one. *The New Way is written with AI. It gathers the day's stories, checks them against their sources and drafts every summary. A person decides what runs and reviews every issue before we hit send.*