Skip to content
Threat Feed

Tag

Malicious-Package

1 brief RSS
critical advisory

Malicious guardrails-ai 0.10.1 Package Published to PyPI

A malicious version of the guardrails-ai package (0.10.1) was published to PyPI on May 11, 2026, advising users who installed this version to downgrade and treat the host as potentially compromised, rotating credentials and auditing GitHub accounts, with Snowglobe and Guardrails Hub API keys being invalidated on May 13, 2026.

guardrails-ai supply-chain pypi malicious-package
2r 1t