GitGuardian Blog - Take Control of Your Secrets Security

The March compromise of litellm lasted about 40 minutes on PyPI. This week we learned what the attackers stole in that time.

On August 12, 2026,

The springs at Las Vegas were essential to western travel. The Old Spanish Trail connected Santa Fe to Southern California through more than a thousand miles of difficult desert terrain. Travelers and their animals depended on those ...

Most large enterprises have some version of a vault program, the combination of policy, platform, process, and ownership used to manage machine credentials. It includes the secrets manager itself, the teams that operate it, the IAM policies that govern it, and the application teams expected to use it. The credentials themselves belong to machine identities: the service accoun...

We have stopped counting the number of waves in the Shai-Hulud attack series, but this week has seen the rise of yet another iteration.

This campaign started with the infection of the [email protected] npm package at 9:35 a.m. UTC on Aug. 4, 2026, and quickly spread across the ecosystem. The compromise chain reportedly affected more than 800 packages across thousands of...