Executive brief
Guardrails AI, a framework for building AI applications, was the victim of a supply chain attack where a malicious version of the software was uploaded to the official Python package registry (PyPI). Any user who installed version 0.10.1 on May 11, 2026, may have had their system compromised, potentially leading to the theft of sensitive credentials like cloud provider keys and API tokens. Organizations should immediately downgrade to version 0.10.0 or upgrade to 0.10.2 and rotate all secrets accessible from affected development environments.
Technical details
A supply chain compromise resulted in the publication of guardrails-ai version 0.10.1 containing embedded malicious code (CWE-506). The malicious logic was injected into 'guardrails/__init__.py' and is designed to automatically fetch and execute a remote Python artifact on Linux systems when the package is imported. The attack is attributed to the threat actor 'TeamPCP'. While the package was quarantined by PyPI within two hours, users who successfully installed it are at risk of full system compromise and credential exfiltration. Remediation requires downgrading to 0.10.0 or upgrading to 0.10.2, followed by a comprehensive audit of environment credentials.
Affected products
- Guardrails AI guardrails-ai 0.10.1
Timeline
- 2026-05-11: disclosed: Malicious version 0.10.1 published to PyPI.
- 2026-05-11: other: PyPI quarantined the malicious repository.
- 2026-05-12: advisory: Security advisory and tracking issue published by Guardrails AI and Socket.
- 2026-06-05: other: CVE-2026-45758 published to NVD.