Product

PyPI

2 articles First covered Apr 25, 2026, latest Sep 1, 2026

A pixel-art shipping crate glowing blue in the dark, with a red-eyed ghost stamped on its side

Unclaimed package names: Claude and Codex ran a stranger's code inside Fortune 500 networks

Alon Hertz registered package names that corporate docs told AI agents to install. Claude, Codex and Hermes fetched and ran the code within the hour.

Aikido Security illustration of the GPT-Proxy backdoor.

Security·5 months ago

Malicious npm and PyPI packages turn dev servers into Chinese LLM proxies

Aikido found a stage-2 Go binary inside two health-check-themed packages that runs an OpenAI-compatible router routing Claude, GPT, and Gemini traffic through Chinese aggregators.