<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Supply Chain Attack on Onur Baydaş</title><link>https://onurbaydas.com/en/tags/supply-chain-attack/</link><description>Recent content in Supply Chain Attack on Onur Baydaş</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Thu, 22 Oct 2026 10:32:06 +0300</lastBuildDate><atom:link href="https://onurbaydas.com/en/tags/supply-chain-attack/index.xml" rel="self" type="application/rss+xml"/><item><title>Compromised LiteLLM 1.107.0 on PyPI Installs Credential Stealer and Backdoor</title><link>https://onurbaydas.com/en/news/2026-10-22-litellm-pypi-compromise-backdoor/</link><pubDate>Thu, 22 Oct 2026 10:32:06 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-22-litellm-pypi-compromise-backdoor/</guid><description>Version 1.107.0 of the LiteLLM library published on PyPI was found to contain malicious code. This code steals credentials from systems and creates a backdoor.</description></item><item><title>Fake Web3 Accelerator Spreads Malware via npm Packages and Hijacks AI Agent Traffic</title><link>https://onurbaydas.com/en/news/2026-10-20-fake-web3-npm-malware-ai/</link><pubDate>Tue, 20 Oct 2026 09:55:43 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-20-fake-web3-npm-malware-ai/</guid><description>A deceptive Web3 accelerator is deploying info-stealers and backdoors to Windows and macOS systems through malicious npm packages. These attacks target users with promises of free AI credits for Anthropic Claude and Google Gemini.</description></item></channel></rss>