nowfound

AI · October 22, 2026

The Internet Is on Fire

A central, community-maintained tracker of recent cybersecurity and AI incidents: data breaches, backdoored npm and PyPI packages, exploited vulnerabilities. Every entry linked to its source and labelled by evidence.

The Internet Is on Fire launched on October 22, 2026 with 5 votes, #741 of 3,357 launches that month and more than 75% of that year's launches.

What it does

A central, community-maintained tracker of recent cybersecurity and AI incidents. LiteLLM confirms its release pipeline pushed malicious 1.107.0 packages to PyPI and container registries. The malware stole credentials and loaded remote-code tools. Affected artifacts were removed; private enterprise releases were not impacted. In the early morning of October 21, 2026, LiteLLM's release pipeline was compromised and pushed a malicious version 1.107.0 to PyPI and to Docker Hub and GHCR. The package contained compiled malware: a credential stealer that runs every time Python starts, plus a remote-code loader backdoor. According to LiteLLM's own incident write-up, the attacker held GitHub CLI…from kuber.studio

Does a similar job

all alternatives →
  • Cyber Pulse2024 · app.overwatchdata.io · ▲154

    Cyber Breaches, Ransomware, Vulnerabilities & Research

  • Analyse Asia 152: Cybersecurity in Asia Pacific with Vincent Loy2016 · content.blubrry.com · ▲60

    Cybersecurity & financial crimes in Asia

  • We post-trained a model that pen tests instead of refusingJun 2026 · argusred.com · ▲93

    Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…

  • Cyberstorm2016 · matthewmather.com · ▲55

    A full scale cyber attack against present-day New York

  • AttackMap2016 · attackmap.info · ▲94

    A crowdsourced map of attacks happening now around the world

  • API RadarJan 2026 · apiradar.live · ▲77

    We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…

More ai this month

the category →
  • Video model that turns script into viral social media videos

    AI · 18d ago · spira.ai

  • The browser where Claude Code and Codex work beside you

    AI · 17d ago · rill.love

  • Kolibri is Aleph Alpha

    AI · 19d ago · tej.as

  • Paintings by AI models: programs run through a simulation of oil paint.

    AI · 21d ago · stillwet.art

  • A real-time world model you can explore and change

    AI · 29d ago · world.pixverse.video

  • Beam.win▲376

    Run AI agents on one Mac and use its windows on another

    AI · 4d ago · beam.win

Launched alongside, October 2026

the whole month →