Top Tweets for #PyPI
LiteLLM supply-chain attack: Poisoned PyPI/Docker release (1.107.0) delivered credential stealer + backdoor. ~49k downloads. Tokens from internal logs. Rotate keys if used. #SupplyChain #AISecurity #PyPI
One malicious package, six new versions in two days. ๐จ pyyi returned on PyPI, five versions in 22 minutes. Blocking one version doesn't stop the package. 10 malicious npm and PyPI versions confirmed this week: https://t.co/phuHDt55aB
#SupplyChainSecurity #Malware #PyPI
A severe LiteLLM supply chain attack compromised version 1.107.0 on PyPI and Docker, deploying automated info-stealers via malicious pth files.
#LiteLLM #SupplyChainAttack #PyPI #Cybersecurity #InfoSec
https://t.co/vhtp3u4RRr
#์ธํฐ๋ท ๋๋๋ฉด #ํด๋ผ์ฐ๋ ์ฌ์
๋ค์ ์ด๋ป๊ฒ ๋๋ ๊ฑธ๊น
#PHP ์ ๋ถ์ฌ์ดํธ๊น์ง ๋ง๋ ์ผ๋ณธ์ ๊ทธ๋ ๊ฐ ํ๋๋ฐ
๊ทธ๊ฑด ์ค๋์ ๋ถํฐ ํด์ปค๋ค์ ๋์ดํฐ์ธ ์ธ์ด์์ผ๋...
์ค๋ #Node.js ํธ๋ฆฌ๊ณ #PyPI ์ธ๊ธ ๋์ค๋ ์ข ๋ฌด์ญ๋ค.
ํ๋ฒ์ด ๋ค๊ฐ ์๋๊ณ ๋ ๋ ์
์ฑ์ด ๋์ด ๋ํ๋ฌ๋ค๋ ...
๐จ THE INTERNET BROKE TODAY ๐จ
Oct 21, 2026 will go down in history
1. eMudhra : Private key was literally "4". 8 keys forged ANY website for 17 months. 60M+ certs at risk.
2. SBI CONFIRMED. 3,897 customers' mobile, DOB, address + loan data found on dark web.
3. Rajasthan Police ๐ฎ๐ณALLEGED hack. Group claims 70,000 identity records + 59,460 numbers for sale. Unverified.
4. php2shell [9.2] Unauth RCE in PHP. 70% of the web. WordPress, Drupal, Laravel. CISA: Patch or GO OFFLINE.
5. GitLab [10.0/10] PERFECT SCORE. Unauth RCE, no login needed.
6. Node.js [CVE-2026-111497] Brotli decoder RCE + TLS bypass. 10 CVEs patched today. Also blocked eMudhra.
7. Railway BREACHED TODAY. Env variables decrypted. Your API keys & DB passwords exposed. Rotate all.
8. OpenCode BREACHED. OpenAI, Anthropic, Google API keys exposed for Console users. Distillation attack. Bills run up in $$$$.
9. LiteLLM PyPI v1.107.0 was MALWARE today morning. Steals credentials + backdoor.
10. Plex2Shell ACTIVELY EXPLOITED. Hackers installing cryptominers LIVE. CISA KEV, deadline Oct 23.
AI found the bugs. AI is exploiting them. Humans can't patch fast enough.
Patch. Rotate. Revoke. Update.
RT to save someone's server โป๏ธ
#CyberSecurity #DataBreach #India #php2shell
ๅใใณใผใใชใฎใซใๆฐใใ็ฐๅขใง Python ใฎใใซใใๅคฑๆใใ๏ผๅบๅฎใใใใใฑใผใธใ PyPI ใใๅ้คใใใใฎใใใใใพใใใ
Deleted Packages Index ใง็ขบ่ชๅฏ่ฝ๏ผhttps://t.co/po5DoTanLq
StableBuild ใชใใ้ๅปใฎๆฅไปๆ็นใฎ PyPI ใใใคใณในใใผใซใงใใพใ๏ผhttps://t.co/G971fjMcIo
#PyPI
Python build broke on a clean machine, same code? A pinned package may have been deleted from PyPI. You can still download it here: https://t.co/PgetsVEml7
StableBuild snapshots PyPI daily, so you can install against PyPI as it was on a past date: https://t.co/mXJ9qbrQru
#PyPI
LiteLLM 1.107.0 on PyPI was backdoored Oct 21: all wheels and the Docker "latest" tags ran a credential stealer at every Python start, no import needed, grabbing cloud, SSH, CI and LLM API keys. Pin 1.106.2, rebuild, rotate all secrets.
#SupplyChain #PyPI #AISecurity
#LiteLLM compromised AGAIN! LiteLLM v1.107.0 on #PyPI carries a remote code execution backdoor and a credential stealer which steals Cloud and AI credentials. #Malware runs at Python startup, no import needed.
#SoftwareSupplyChainSecurity
๐
https://t.co/hnI27TKRKw
A LiteLLM supply chain attack shipped a PyPI credential stealer in version 1.107.0 that grabs cloud, AI tool, and SSH secrets. Act now.
#LiteLLM #SupplyChainAttack #PyPI #Python #CredentialTheft #AISecurity #DevSecOps #Cybersecurity
https://t.co/4Pknu5nwQZ
OpenTryOn v0.0.8 is out.
New: Clad body measurement, FLUX 3 Image Klein and Video, NVIDIA LipSync, and TRELLIS 3D.
163 models. 13 services. Same CLI and MCP.
https://t.co/WkbABOsPMX
#TryOnAI #BodyMeasurement #3D #Embeddings #FLUX #LipSync #OpenSourceAI #MachineLearning #PyPI
WhiteSnake stealer hides in PyPI packages, then phones home over Tor and Telegram. https://t.co/TiKgreoqyp #ThreatIntel #WhiteSnake #PyPI #Infostealer
Anaconda now hosts 2,500 Arm packages, while NumPy and SciPy publish native wheels to aid data scientists migrating off emulation. #Python #Microsoft #PyPI https://t.co/JI1LihOFq1
The #GhostAction campaign compromised 327 #GitHub accounts & injected disguised malicious security workflows across 817 repos, successfully stealing 3,325 CI/CD secrets, including tokens for #PyPI, 3npm, #DockerHub, & #GitHub. HT @GitGuardian https://t.co/sk7CmAmIDc #infosec
randnamepy just crossed 1K downloads on PyPI
Started as a small side project to generate realistic random names, usernames & test data โ and now people are actually downloading it.
#Python #OpenSource #PyPI #BuildInPublic #DevCommunity #SoftwareDevelopment #GitHub
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers