PyPI Supply-Chain Credential Theft | Privacy

Last Update: 09/22/2026 at 11:34 PM EST

Coverage from BleepingComputer, OX Security, and others

Recent reports describe malicious PyPI package uploads that run on import, add persistence, and steal cloud credentials, SSH keys, tokens, and other secrets from Python environments.

Looking Back

99 Day Timeline

Articles published over time. Hover any bar for the period and its article count.

Mar 24

Apr 9

Apr 25

May 13

May 29

Jun 14

Jun 30

All Articles4 articles

Additional4 articles · CI Score below 45

BleepingComputer / Bill Toulas

Malicious PyPI Packages Backdoor Telegram Bot Servers

6/30/2026 • Cybersecurity Tech (Privacy-Relevant) • General

BleepingComputer / Bill Toulas

Telnyx PyPI Package Backdoored With WAV-Hidden Malware

3/27/2026 • Cybersecurity (Privacy-Relevant) • General

OX Security

Malicious Xinference PyPI Versions Steal Cloud Credentials

4/22/2026 • Cybersecurity (Privacy-Relevant) • General

BleepingComputer / Lawrence Abrams

LiteLLM PyPI Package Backdoored In Supply-Chain Attack

3/24/2026 • Cybersecurity (Privacy-Relevant) • General