Massive supply-chain attack leaks terabytes of credentials

A compromised AI package has led to one of the more alarming supply-chain breaches in recent memory, with terabytes of credentials scraped and exfiltrated from 2,500 affected users. The attack highlights the growing security risk of pulling third-party AI libraries into production pipelines without rigorous vetting.