Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest
AGI Dreams Podcast – March 25, 2026
Supply Chain Under Siege
In this episode:
Supply Chain Under Siege — Malicious LiteLLM packages on PyPI stole API keys and cloud credentials, while TeamPCP poisoned multiple GitHub Actions with self-propagating supply chain attacks. SEO poisoning of AI tooling search results extends the threat beyond package registries into the discovery layer itself.
Confused Deputies and Composition Failures — Multi-agent coding workflows face confused deputy attacks where Claude Code and Codex each treat the other's config as ordinary writable files, enabling cross-agent privilege escalation…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.