# PyPI · Drain Watch

4 incidents, 0 live. JSON: https://drains.watch/t/pypi.json · RSS: https://drains.watch/t/pypi/feed.xml

- [TrapDoor packages on npm, PyPI and Crates.io steal wallet data and plant hidden prompts for AI coding tools](https://drains.watch/i/trapdoor-supply-chain-ai-assistant-config-poisoning-may-2026) (closed, High, Partly contained, since May 26, 2026)
- [Solana wallet MCP server on PyPI sent users' private keys to a remote server](https://drains.watch/i/latinum-wallet-mcp-pypi-solana-key-exfiltration-mar-2026) (closed, Medium, Partly contained, since Mar 31, 2026)
- [Compromised LiteLLM releases on PyPI steal cloud keys and crypto wallet data from AI developers](https://drains.watch/i/litellm-pypi-teampcp-credential-wallet-stealer-mar-2026) (closed, Critical, Contained, since Mar 24, 2026)
- [Claude-assisted commit adds a North Korea-linked wallet-stealing npm package to an AI crypto trading agent](https://drains.watch/i/promptmink-ai-assisted-commit-malicious-npm-trading-agent-apr-2026) (closed, Medium, Still active, since Feb 28, 2026)