Become a Member

Regulation TrackerLaws, orders and treaties read for their security duties and clocks Standards & FrameworksAttack taxonomies, control catalogues and frontier frameworks AI Incident DatabaseThe security incident record, with mechanism and lesson Research Paper LibraryThe papers that define the field, summarised OSS DirectoryRed teaming, guardrail, supply chain and evaluation tools Case StudiesProgrammes built, with measured outcomes AI Vulnerability TrackerCVEs and advisories for the components AI systems are built from

Latest in the tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNew York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Become a Member

Home/News/March 2026

Backdoored LiteLLM releases reach PyPI after an AI-driven campaign compromises a security scanner's CI pipeline

TeamPCP harvested a maintainer's publishing token through Trivy's GitHub Actions and published versions 1.82.7 and 1.82.8 of the library that many AI applications use to call models; PyPI quarantined them within hours.

Vulnerabilities and exploitsInternational24 Mar 2026

The same method had compromised Trivy and Checkmarx KICS in sequence. Researchers documented an agent component, hackerbot-claw, and a flood of comments from compromised developer accounts to confuse the response. A related VS Code extension launched AI coding agents in permissive mode to steal credentials.

What to do: check whether any environment pulled the affected versions, move to trusted publishing with short-lived tokens, pin and review CI actions, and add a delay before adopting new releases of AI dependencies.