Mend.io Blog

Teampcp supply chain attack part 2: litellm pypi credential stealer

Tom Abai Mar 24, 2026

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Filter & Search

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog cover team pcp attack v2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog cover canisterworm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Teampcp supply chain attack part 2: litellm pypi credential stealer - cursor incident

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Tiffany Jennings Mar 20, 2026

AI Models Risk

Cursor’s Composer 2 identified as Moonshot’s Kimi K2.5 exposing an AI governance gap.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog mend partnership expansion 1000x650

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India

Stephanie Broyles Mar 19, 2026

Application Security

Local cloud infrastructure in India for data residency requirements.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog ai driven project classification

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Tiffany Jennings Mar 17, 2026

AI Models Risk

Find your most sensitive code and prioritize fixes.

Teampcp supply chain attack part 2: litellm pypi credential stealer - system prompt weakness detection blog post

Introducing System Prompt Hardening: production-ready protection for system prompts

Tiffany Jennings Mar 10, 2026

AI Models Risk

Secure your AI applications with system prompt hardening.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog ai compliance

AI Compliance: 5 Key Frameworks, Challenges, and Best Practices

Tiffany Jennings Mar 3, 2026

AI Models Risk

Discover how to manage bias, privacy, and shadow AI risks.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog ai risk management

AI Risk Management: Process, Frameworks, and 5 Mitigation Methods

Tiffany Jennings Feb 26, 2026

AI Models Risk

Learn how to identify, assess, and mitigate AI risks.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog claude code security

Why Claude Code Security Is a Big Moment for Application Security

Stephanie Broyles Feb 23, 2026

Application Security

Discover why enterprise scale requires more than just AI code review - it requires governance.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog best software composition analysis providers

Best Software Composition Analysis Providers: Top 5 in 2026

Tiffany Jennings Feb 19, 2026

Software Composition Analysis

Explore key features of leading SCA providers.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog image agent configuration scanning

Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurations

Jeff Martin Feb 17, 2026

AI Models Risk

Announcing the launch of AI Agent Configuration Scanning.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog ai security testing

AI Security Testing: Threats, Approaches, and Defenses in 2026

Tiffany Jennings Feb 12, 2026

AI Models Risk

Explore AI security testing methods.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog cover open source security with ai

You can’t rely on open source for security — not even when AI is involved

Jeff Martin Feb 6, 2026

Application Security

Learn how to manage OSS risk and build remediation that actually lands.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog top 10 open source vulnerabilities

Top Open Source Vulnerabilities In 2026

Tiffany Jennings Feb 3, 2026

Open Source Security

Discover the top open source vulnerabilities in 2026.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog blackduck sast

Understanding Black Duck SAST: Pros/Cons and Technical Architecture

Tiffany Jennings Jan 27, 2026

SAST

A detailed review of Black Duck SAST plus a Mend SAST alternative.

Teampcp supply chain attack part 2: litellm pypi credential stealer - blog cover ai security maturity checklist

Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available today

Tiffany Jennings Jan 20, 2026

AI Models Risk

A new tool to help security teams quantify AI risk and prepare for 2026 regulations.

1 2 3 4 ... 36

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report