The Package Registry Layer: How Supply-Chain Attacks Are Targeting Agent Infrastructure

The LiteLLM Breach and the New Reality of AI Infrastructure On March 24, 2026, the Python Package Index (PyPI) hosted malicious versions of the LiteLLM library—specifically 1.82.7 and 1.82.8—for ...
Cybernews

New exploit tricks Claude Code into running malicious code despite Auto Mode

Claude Code Auto Mode can run malware via a malicious ZIP despite safety checks. Read what the exploit reveals ...
Dark Reading

Flaws in Google APK for Python Unlock Agent-to-Agent Attack

AI agents can be weaponized against each other using prompt injections via a chain of flaws in Google's open source Agent Development Kit (ADK) for Python, potentially disrupting the software supply ...