Supply-chain attack on AI package exposes credentials of 2,500 users

A supply-chain attack targeting a compromised AI software package has resulted in a significant data breach. Terabytes of credential data were scraped and exfiltrated from approximately 2,500 affected users. The attack exploited the software supply chain, meaning malicious code was embedded within a trusted package used by developers. The scale of the leak highlights growing security risks associated with third-party AI tools and dependencies.