Utopia Tech
▸ Engineering & Strategy Journal

Field notes from the edge.

What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.

All postsHealthcareEngineeringStrategySecurityIndustry
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
FeaturedAI
Security· 1 min read

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Two malicious versions of the LiteLLM package were published on PyPI for approximately 40 minutes in March, containing credential-stealing malware that targeted cloud keys, SSH keys, Kubernetes tokens, and database passwords. CloudSEK's analysis of approximately 434,000 captured files suggests that over 2,100 organizations may have been exposed to this supply chain attack.

UT
Utopia Tech·Aug 12, 2026
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential StealerAI
Security

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

A new supply chain attack called Hades has compromised 19 packages in the Python Package Index (PyPI) registry, deploying 37 malicious wheel artifacts designed to automatically execute credential-stealing malware. This attack represents an evolution of the Miasma campaign, using *-setup.pth files for automatic execution and demonstrating increasingly sophisticated targeting of specific development

UTUtopia Tech·1 min
'Hades' Campaign Against PyPI Puts New Spin on Shai-HuludAI
Security

'Hades' Campaign Against PyPI Puts New Spin on Shai-Hulud

A new malware campaign dubbed 'Hades' has targeted the Python Package Index (PyPI), compromising 37 wheel distributions and 19 code packages. This attack represents an evolution of the Shai-Hulud threat, demonstrating the ongoing sophistication of software supply chain attacks targeting open-source repositories.

UTUtopia Tech·1 min
Skip to main content