Fay | فيّ

i work in cybersecurity

[Aakash Gupta @aakashgupta]

Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine.

The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once.

The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine.

The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had.

That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months.

The attack chain is the part that gets worse every sentence.

TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials.

Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one.

The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions.

TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.”

Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours.

The companies deploying AI the fastest right now have the least visibility into what’s underneath it.

[Polymarket @Polymarket]

JUST IN: Petri dish of human brain cells grown on a microchip has learned to play DOOM.

[Michał Podlewski @trajektoriePL]

Cardiologist wins 3rd place at Anthropic's hackathon. Out of 13,000 applications. Built in 7 days by Michał Nedoszytko MD. Coded day and night - in the hospital, in the cloud, while flying from Brussels to San Francisco.
A few years ago, it would have been impossible for a doctor to build this alone in just a couple of days. AI changed that.

The project is called https://t.co/wAliajqjVF. It is an AI agentic care platform for patients. Including reverse AI scribe it is a companion that guides the patient from the moment they leave the doctor's office.

Powered by the massive context window of Opus 4.6, it allows patients to explore their full medical history, connected devices, Evidence Based resources and external data sources — all in one place.

Today, the barrier to entry has vanished; even a practicing physician can build an application from scratch.

[International Cyber Digest @IntCyberDigest]

‼️🇮🇱 Smartphones worldwide were silently infected with Israeli malware via malicious ads

Simply viewing their ads was enough to get infected.

Surveillance company Intellexa gained full access to cameras, microphones, chat apps, emails, GPS locations, photos, files, and browsing activity.

[IT Unprofessional @it_unprofession]

Last month my intern asked for help with a Kubernetes error.

He was stuck on a YAML file.

He looked desperate.

I make $275,000 a year.

I haven't written a line of code since 2017.

I don't even know what a "pod" is.

But I didn't tell him that.

I leaned back in my Herman Miller chair.

I said, "Stop trying to code. Start prompting."

I told him to paste the error into ChatGPT.

He did.

The AI told him to delete the cluster.

He did.

Production went down instantly.

The CEO called me screaming.

I didn't panic.

I told the CEO we were "testing our disaster recovery protocols."

He was impressed by my foresight.

I got a bonus.

The intern got fired.

Innovation requires sacrifice.

Just not mine.

[Fay | فيّ @fazdekx]

My favorite thing I’ve read today

[Naoki Yamamoto @NaokiQYamamoto]

"al-Fatiha"
Sura al-Fatiha written with traditional Japanese calligraphy.
Designed by Naoki Yamamoto

[Tib3rius @0xTib3rius]

Not sure if this counts but the fact there's a feature in Burp Pro to make it look like you're working when you're not has always amused me. 😂

[Antonio Cocomazzi @splinter_code]

Do you want to start the RemoteRegistry service without Admin privileges?
Just write into the "winreg" named pipe 👇