pypi

The Automation Epidemic: Massive Code-Poisoning Campaign Targets the Open-Source and AI Ecosystems

A highly coordinated hacker group is poisoning open-source repositories at an scale never seen before, leveraging automated tools to compromise registries like PyPI and npm. We explore the threat to AI development pipelines and how the industry must respond.