TeamPCP strikes again: Xinference (v2.6.0-2.6.2) PyPI package compromised Posted by lukecarr on Wednesday April 22, 2026 @09:22AM from the research.jfrog.com dept. https://research.jfrog.com/post/xinference-compromise/ ( 1 comment | on HN )
Also, worth mentioning that TeamPCP denies involvement, and instead points to a copycat using their name: https://xcancel.com/tradelots/status/2046928328066543832