Hackernews posts about PyPI

PyPI is the Python Package Index, a repository of open-source software packages for the Python programming language.

1. Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised (github.com)
   937 points by dot_treo 8 days ago | 501 comments
2. Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer (github.com)
   739 points by theanonymousone 8 days ago | 1 comments
3. Telnyx package compromised on PyPI (telnyx.com)
   132 points by ramimac 5 days ago | 136 comments
4. Telnyx package compromised on PyPI (www.aikido.dev)
   85 points by overflowy 4 days ago | 1 comments
5. LiteLLM PyPI has been compromised an hour ago, do not update (futuresearch.ai)
   27 points by Bullhorn9268 8 days ago | 5 comments
6. Supply Chain Attack in litellm 1.82.8 on PyPI (futuresearch.ai)
   8 points by vnorilo 7 days ago | 1 comments
7. Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens (www.bleepingcomputer.com)
   6 points by billybuckwheat 6 days ago | discuss
8. The telnyx packages on PyPI have been compromised (lwn.net)
   5 points by amcclure 4 days ago | discuss
9. Team PCP Strikes again – `telnyx` on PyPI gets compromised (safedep.io)
   5 points by Sahil121 5 days ago | discuss
10. TeamPCP strikes again – telnyx popular PyPI library compromised (research.jfrog.com)
    4 points by homarp 5 days ago | 1 comments
11. Litellm PyPI supply chain attack (twitter.com)
    4 points by vinnyglennon 7 days ago | discuss
12. A multi-week, multi-ecosystem attack chain spanning GitHub Actions, npm, PyPI (ramimac.me)
    3 points by dsr12 7 days ago | discuss
13. Show HN: Search 7,500 MCP servers across NPM, PyPI, and the official registry (api.rhdxm.com)
    3 points by c5huracan 20 days ago | discuss
14. Compromised telnyx on PyPI (safedep.io)
    2 points by jruohonen 2 days ago | 1 comments
15. PyPI and GitHub package stats combined (pypi.kopdog.com)
    2 points by bramwick 11 days ago | 1 comments
16. Show HN: Pypistats – Real-time PyPI trends, AI insights and badges (pypistats.com)
    2 points by diverdale 26 days ago | 1 comments
17. Litellm 1.82.7 and 1.82.8 on PyPI are compromised (old.reddit.com)
    2 points by latchkey 8 days ago | discuss
18. SBOM Adoption on PyPI Is at 1.58%. We Can Do Better (sbomify.com)
    2 points by mvip 19 days ago | discuss
19. Regxa – query NPM, PyPI, crates.io, RubyGems, Packagist from one TypeScript call (github.com)
    1 points by oritwoen 21 days ago | 1 comments
20. My minute-by-minute response to the LiteLLM malware attack (futuresearch.ai)
    438 points by Fibonar 6 days ago | 158 comments
21. Show HN: AgentArmor – open-source 8-layer security framework for AI agents (github.com)
    10 points by AgastyaTodi 18 days ago | 6 comments
22. Repsy – A lightweight, open-source alternative to Nexus/Artifactory
    7 points by nuricanozturk 5 days ago | discuss
23. Show HN: mcp-recorder – VCR.py for MCP servers. Record, replay, verify (github.com)
    6 points by caballeto 26 days ago | discuss
24. Show HN: Lexe – Self-Custodial Lightning Nodes in TEEs, Python and Rust SDKs (blog.lexe.app)
    5 points by phlip9 6 days ago | 2 comments
25. Show HN: DJX – Convention over Configuration for Django (Rails-Inspired CLI)
    5 points by RedsonNgwira 18 days ago | 2 comments
26. Show HN: Mnemora – Serverless memory DB for AI agents (no LLM in your CRUD path) (github.com)
    4 points by isaacgbc 27 days ago | 4 comments
27. Show HN: VR.dev – Open-source verifiers for what AI agents did (www.vr.dev)
    3 points by SkiFreeWin3 22 days ago | 2 comments
28. Show HN: SafeAgent – exactly-once execution guard for AI agent side effects
    3 points by Lions2026 24 days ago | 2 comments
29. Pipguard – catches .pth malware before pip install runs
    3 points by shenxianpeng 6 days ago | discuss
30. Show HN: GitDB – GPU-accelerated vector database with Git-style version control
    3 points by vkaufmann 17 days ago | discuss