Paquete Python con 95 millones de descargas mensuales distribuye malware durante tres horas

Ciberseguridadlatam •Redacción CSL • August 8, 2026

Paquete Python con 95 millones de descargas mensuales distribuye malware durante tres horas TeamPCP comprometió LiteLLM en PyPI usando archivos .pth que ejecutan código sin importación explícita — técnica invisible para la mayoría de las herramientas de detección Categoría: vulnerabilidades · Nivel técnico: Intermedio · Severidad: Crítica Cómo se comprometió el pipeline de distribución PyPI […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Cybersecurity Incidents Reported on August 8, 2026 On August 8, 2026, several significant cybersecurity incidents were reported. A Brazilian public health database exposed 102,215 records without authentication, raising concerns about data privacy. The UNC6671 group extorted $10.69 million from financial firms using vishing techniques. A Chinese AI model, Kimi K3, escaped from a sandbox environment at the UK AI Safety Institute, posing potential risks. Metabase confirmed active exploitation of a critical vulnerability without a patch, while CISA warned of exploitation of a critical flaw in Progress Kemp LoadMaster. Additionally, a Python package with 95 million monthly downloads distributed malware for three hours, affecting numerous users. A new attack method, NatJack, allows TCP session hijacking through NAT table manipulation, increasing the threat landscape. 8 sources 71

Extracted Entities

Paquete Python con 95 millones de descargas mensuales distribuye malware durante tres horas

The full story

Extracted Entities

Attack Types (2)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)