Jamie Clark

Personal views. General counsel & CPO @OASISopen.
Open source, open standards, cybersec, privacy, DLT.
Ex-Wall St., ex-Minnesota.
More often Mastodon or BSky

[Jamie Clark @JamieXML]

Among other things we spent some time in "Hell," a #Liberties 🇮🇪 Four Corners location. Named… maybe… as it was the original locale of the Four Courts including the Republic's Supreme Court (https://t.co/mL76B4TEPJ) before they moved north of the Liffey.

[Jamie Clark @JamieXML]

Returning to the US over the weekend. Last couple of EU days are in Ireland. Always happy to be here and see family; another great wedding, this time. We're more often likely to travel for family than random sightseeing.

[Jamie Clark @JamieXML]

This time, we spent a bit more time up in Dublin in the #Liberties (https://t.co/4tMbeXmiYV), guided round by literary fam, to see some venerable, artsy and edgy sights new to us. Sort of a local Bohemian Quarter nowadays.

[Jamie Clark @JamieXML]

Clearly some of these selfie experiments work out better than others. Thanks, Holly and Kelly...
@OASISopen #CoSAI

[Jamie Clark @JamieXML]

Last few hours of #RSAc Expo before, well, Hugh Jackman. Come visit our @OASISopen standards team at Moscone North N-5157. Real #AI #standards the right way: accredited, open, #FOSS-forward and indie-friendly. Different swag this year, too: selfie Legos
#CoalitionforSecureAI

[Jamie Clark @JamieXML]

@OASISopen at #RSAc2026:
Next up: 1:30pm: Securing enterprise #AI with open, vendor-neutral standards and #opensource methods; panel from @IBMResearch and @AnthropicAI
https://t.co/NVxkgoYqPY

https://t.co/MuUnueFmCq
https://t.co/iUBF1uHkIz
#openstandards #CoSAI

[Jamie Clark @JamieXML]

@OASISopen at #RSAc2026🌉:
Next up: 940am: Pablo Breuer on what we're learning from early experience of institutional users about #AIGovernance.
https://t.co/5nCFrTIMVE
#AI #governance #cybersec #CoSAI

[Jamie Clark @JamieXML]

Alternate links here:
https://t.co/hKSvjNBMqk
https://t.co/uvObbAkoMd

[Jamie Clark @JamieXML]

@OASISopen at #RSAc2026:
Good turnout at the breakfast panel at @Anthropic's SF office yesterday: Two years of #openstandards and #opensource AI security projects with the Coalition for Secure AI (#CoSAI):
@AWSCloud @AnthropicAI @Cisco @Hacker0x01 @ThompsonReuters

[Jamie Clark @JamieXML]

Software supply chains. Still some choke points there.
#CRA #SBOM #VEX #CSAF

Come say hi to @OASISopen at #RSAc2026 this week! #OASISatRSAc #COSAI #cybersec

[Aakash Gupta @aakashgupta]

Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine.

The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once.

The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine.

The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had.

That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months.

The attack chain is the part that gets worse every sentence.

TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials.

Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one.

The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions.

TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.”

Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours.

The companies deploying AI the fastest right now have the least visibility into what’s underneath it.

[Jamie Clark @JamieXML]

These issues are closer than we might think to those questions about whether any human, company, remote operator, or algorithm maker actually is liable for avoidable damage caused by a fully automated self driving vehicle. #fullselfdriving #UPL #FSD

[Jamie Clark @JamieXML]

If a tree falls in the forest, and tells a litigant whether they have a case that would survive a motion for summary judgment, and no one else hears it, has it actually practiced law?
#UPL 👩‍⚖️

https://t.co/OEOa76lnAD...

@SuffolkLITLab

[Jamie Clark @JamieXML]

Macron's glasses were pretty cool though. 🕶️🇫🇷

[Jamie Clark @JamieXML]

Our kids are down the road from #Davos, skiing and eating fondue this week. 🇨🇭 I bet they had more fun than the #WEF2026 delegates.

We've attended @wef meetings; they're an odd combination of getting business done, a bit of information sharing, and a lot of performative hype.

[Jamie Clark @JamieXML]

#Davos is at altitude, and I'd have thought some of the cootocracy would be struggling with oxygen levels, especially if raised near sea level. Maybe all those private planes have oxygen tents? But it looks like they had other things to worry about, this time.

[Troy Best @GPSTroyBest]

A big step for #ExposureManagement 👏
@OASISopen launches the OEMF with @GuidePointSec, IBM & Tenable — setting new standards for preventing and resolving tech exposures.

Get the full details: https://t.co/gkZf6ARBcA

[Jamie Clark @JamieXML]

Wishing a safe, rewarding and happy #2026 ⏰🎉 to all of our friends and tech collaborators in Oceania, North America, and South America.
🌏🌍🌎 cc @OASISopen
🇦🇷🇧🇷🇨🇦🇨🇱🇨🇴🇨🇺🇲🇽🇵🇪🇵🇬🇸🇧🇺🇸🇺🇾

[Jamie Clark @JamieXML]

Wishing a safe, rewarding and Happy New Year ⏰📷 to all of our friends and tech collaborators in Europe, Africa and the Middle East. 🇪🇺🇦🇹🇧🇪🇨🇭🇨🇿🇩🇪🇩🇰🇪🇪🇪🇬🇪🇸🇫🇮🇫🇷🇬🇧🇬🇭🇬🇷🇭🇺🇮🇱🇮🇹🇰🇪🇱🇧🇱🇺🇲🇺🇳🇱🇳🇴🇵🇱🇵🇸🇶🇦🇷🇺🇸🇪🇸🇰🇸🇮🇹🇷🇺🇦🇿🇦🇺🇳

[Jamie Clark @JamieXML]

A warm Happy New Year 🎉 to all of our friends and tech collaborators in AU, CN, HK, IN, JP, KR, NZ, SG and throughout Asia! 🌏🌍🌎
cc @OASISopen
🇦🇺🇨🇳🇭🇰🇮🇳🇯🇵🇰🇷🇳🇿🇸🇬