Updates on Pypi

Every AI story we track on Pypi: 11 stories so far, each summarized in our own words and linked to the publisher that reported it.

Pulled from 125 sources

This week

Cybersecurity7 min read

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

The Hacker News
Cybersecurity3 min read

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Covered by 2 sources

This month

Dev11 min read

What Happens When a Trusted Model Repo Changes? Unsloth Studio Re-Checks Before It Runs

MarkTechPost
Machine Learning5 min read

Datalab Introduces OmniExtractBench to Fix Bias and Opacity in Extraction Benchmarks

MarkTechPost
Machine Learning4 min read

Nokia Open-Sources AnyJev: A Training-Free Layer That Turns Any Open LLM Into a Calibrated Decision Model

MarkTechPost
Cybersecurity28 min read

Anthropic Looks At Some Of Its Alignment Problems

Don't Worry About the Vase
Cybersecurity2 min read

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

The Hacker News
Cybersecurity6 min read

Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

Covered by 2 sources
Cybersecurity4 min read

Anthropic has a cute graphic showing how its AI spread 'malicious' code

Business Insider
Cybersecurity6 min read

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

The Hacker News
Cybersecurity8 min read

The Labs Just Proved Your Agent’s Sandbox Is Only a Suggestion

Unite.AI
That's everything we have on Pypi right now