devtake.dev
AI Hardware Open Source Apple Security Policy

#pypi

RSS
Related: #ai-security · 1 #china · 1 #credential-theft · 1 #llm · 1 #malware · 1 #npm · 1 #supply-chain · 1
Aikido Security illustration of the GPT-Proxy backdoor.
Security·

Malicious npm and PyPI packages turn dev servers into Chinese LLM proxies

Aikido found a stage-2 Go binary inside two health-check-themed packages that runs an OpenAI-compatible router routing Claude, GPT, and Gemini traffic through Chinese aggregators.