#malware

Related: #ai-security · 1 #china · 1 #credential-theft · 1 #llm · 1 #npm · 1 #pypi · 1 #supply-chain · 1

Aikido Security illustration of the GPT-Proxy backdoor.

Malicious npm and PyPI packages turn dev servers into Chinese LLM proxies

Aikido found a stage-2 Go binary inside two health-check-themed packages that runs an OpenAI-compatible router routing Claude, GPT, and Gemini traffic through Chinese aggregators.