From Dev.to
Your AI Gateway Logs Are Now a Credential Store, Whether You Meant That or Not
An OAuth token ended up in a log file, and a few steps later a poisoned package was sitting on PyPI. That's the whole story, and it should bother you more than the malware does. On October 21, 2026, L...