1.Who was behind the attack? Possibly nobodyblog | 2026-08-05 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #agentic-ai | #incident-response
2.Anthropic's Fever Dream: Claude's package that stole real keysblog | 2026-07-31 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
3.Aikido x Drydock | A way for maintainers to catch malware before it shipsblog | 2026-06-23 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
4.Shai-Hulud copycat campaign targets Python developers through PyPI typosquattingblog | 2026-06-09 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #malware | #credential-theft
5.Why EDR and proxy won’t save you from supply chain malwareblog | 2026-06-02 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
6.durabletask: TeamPCP's Latest PyPi Compromiseblog | 2026-05-19 17:30 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
7.33K Exposed LiteLLM Deployments and the C2 Servers Behind TeamPCP's Supply Chain Attackincident | 2026-03-27 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #kubernetes | #credential-theft
8.LiteLLM Supply Chain Compromiseincident | 2026-03-24 00:00 | netspi.com | Original ↗ | .md | #ai-security | #supply-chain | #incident-response
9.Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaignblog | 2026-03-24 18:40 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
10.Introducing Aikido Package Health: a Better Way to Trust Your Dependenciesblog | 2026-02-03 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
11.Supply chain attacks are exploiting our assumptionsincident | 2025-09-24 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #supply-chain-security
12.Making PyPI's test suite 81% fasterblog | 2025-05-01 13:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #pypi
13.Launching Aikido Malware – Open Source Threat Feedresearch | 2025-03-31 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
14.PyPI now supports archiving projectsblog | 2025-01-30 14:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #pypi | #python
15.Ultralytics AI Library Hacked via GitHub for Cryptominingincident | 2024-12-09 15:56 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #github-actions
16.Attestations: A new generation of signatures on PyPIblog | 2024-11-14 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #python
17.Securing the software supply chain with the SLSA frameworkblog | 2024-10-01 13:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #pypi
18.Internet freedom with the Open Technology Fundblog | 2024-01-15 13:30 | blog.trailofbits.com | Original ↗ | .md | #open-source | #security-audit | #pypi
19.Our audit of PyPIblog | 2023-11-14 13:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #pypi
20.3 Software Supply Chain Risks in 2023blog | 2023-07-12 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #npm | #pypi
21.Trusted publishing: a new benchmark for packaging securityblog | 2023-05-23 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #authentication
22.Themes from PyCon US 2022blog | 2022-06-09 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #conference
23.Getting 2FA Right in 2019blog | 2019-06-20 10:50 | blog.trailofbits.com | Original ↗ | .md | #pypi | #authentication | #account-security