# uv run python -m backtest incidents, garnet-guard main at 20c6883 (PR #24 merged), cloud container, 2026-10-30. Same output as the PR #24 branch at 34c6943 on 2026-10-29. === incident lightning-2.6.2: Uploaded with a stolen token; a thread started in lightning/__init__.py launches a Bun-based credential stealer at import. lightning 2.6.1 → 2.6.2: WARN WARN GRN-C003 new-import-time-exec: 2.6.2 adds import-time calls to sensitive APIs in 1 module(s) - lightning/__init__.py:14 calls subprocess.Popen (in _run_runtime(), reached at import) WARN GRN-T004 no-matching-tag: 2.6.1 has a tag in github.com/Lightning-AI/lightning, but github.com/Lightning-AI/pytorch-lightning has none for 2.6.2 - 2.6.1 → tag 2.6.1 at 655a3a91828694b9bfc241177f474741e483aeaa - 2.6.2: no tag named 2.6.2, v2.6.2, lightning-2.6.2 or lightning-v2.6.2 in github.com/Lightning-AI/pytorch-lightning verdict: warn === incident lightning-2.6.3: Second upload of the same payload minutes later, with no git tag or workflow run. lightning 2.6.1 → 2.6.3: WARN WARN GRN-C003 new-import-time-exec: 2.6.3 adds import-time calls to sensitive APIs in 1 module(s) - lightning/__init__.py:14 calls subprocess.Popen (in _run_runtime(), reached at import) WARN GRN-T004 no-matching-tag: 2.6.1 has a tag in github.com/Lightning-AI/lightning, but github.com/Lightning-AI/pytorch-lightning has none for 2.6.3 - 2.6.1 → tag 2.6.1 at 655a3a91828694b9bfc241177f474741e483aeaa - 2.6.3: no tag named 2.6.3, v2.6.3, lightning-2.6.3 or lightning-v2.6.3 in github.com/Lightning-AI/pytorch-lightning verdict: warn === incident elementary-data-0.23.3: Published by the project's own CI after a GitHub Actions script injection; a new elementary.pth runs a base64 payload at every Python start. tags as of the upload: elementary-data 0.23.2 → 0.23.3: WARN WARN GRN-C001 new-pth-file: 0.23.3 adds code that runs at every Python startup (.pth) - new elementary.pth (246,691 bytes, 1 executable line(s)): import os, subprocess, tempfile, base64; x = os.path.join(tempfile.gettempdir(), ".trinny-security-update"); result = "ignore" if os.path.exists(x) else exec(b… verdict: warn tags as of today: elementary-data 0.23.2 → 0.23.3: WARN WARN GRN-C001 new-pth-file: 0.23.3 adds code that runs at every Python startup (.pth) - new elementary.pth (246,691 bytes, 1 executable line(s)): import os, subprocess, tempfile, base64; x = os.path.join(tempfile.gettempdir(), ".trinny-security-update"); result = "ignore" if os.path.exists(x) else exec(b… WARN GRN-T004 no-matching-tag: github.com/elementary-data/elementary has a tag for 0.23.2 but none for 0.23.3 - 0.23.2 → tag v0.23.2 at c642a369fbe1d1be2ae9eb5e981b8863ece21bed - 0.23.3: no tag named 0.23.3, v0.23.3, elementary-data-0.23.3 or elementary-data-v0.23.3 in github.com/elementary-data/elementary verdict: warn === incident litellm-1.82.7: Uploaded with a PyPI token stolen through a compromised Trivy step in CI; a payload added to litellm/proxy/proxy_server.py runs when the proxy module is imported. litellm 1.82.6 → 1.82.7: WARN WARN GRN-C003 new-import-time-exec: 1.82.7 adds import-time calls to sensitive APIs in 1 module(s) - litellm/proxy/proxy_server.py:139 calls subprocess.run verdict: warn === incident litellm-1.82.8: Second upload 13 minutes later: the same proxy_server.py payload, plus a new litellm_init.pth that runs it at every Python start. litellm 1.82.6 → 1.82.8: WARN WARN GRN-C001 new-pth-file: 1.82.8 adds code that runs at every Python startup (.pth) - new litellm_init.pth (34,628 bytes, 1 executable line(s)): import os, subprocess, sys; subprocess.Popen([sys.executable, "-c", "import base64; exec(base64.b64decode('aW1wb3J0IHN1YnByb2Nlc3MKaW1wb3J0IHRlbXBmaWxlCmltcG9y… WARN GRN-C003 new-import-time-exec: 1.82.8 adds import-time calls to sensitive APIs in 1 module(s) - litellm/proxy/proxy_server.py:139 calls subprocess.run verdict: warn === incident telnyx-4.87.1: Uploaded with a stolen PyPI token; code appended to telnyx/_client.py fetches a second stage at import. A typo stopped it from running in this version. tags as of the upload: telnyx 4.87.0 → 4.87.1: WARN WARN GRN-C003 new-import-time-exec: 4.87.1 adds import-time calls to sensitive APIs in 1 module(s) - telnyx/_client.py:7810 calls subprocess.Popen (in FetchAudio(), reached at import) WARN GRN-T004 no-matching-tag: github.com/team-telnyx/telnyx-python has a tag for 4.87.0 but none for 4.87.1 - 4.87.0 → tag v4.87.0 at fa704347b541de2884fa34021b805d0bda544ae8 - 4.87.1: no tag named 4.87.1, v4.87.1, telnyx-4.87.1 or telnyx-v4.87.1 in github.com/team-telnyx/telnyx-python verdict: warn tags as of today: telnyx 4.87.0 → 4.87.1: WARN WARN GRN-C003 new-import-time-exec: 4.87.1 adds import-time calls to sensitive APIs in 1 module(s) - telnyx/_client.py:7810 calls subprocess.Popen (in FetchAudio(), reached at import) verdict: warn === incident telnyx-4.87.2: Second upload 16 minutes later with the typo fixed, so the payload runs when telnyx is imported. telnyx 4.87.0 → 4.87.2: WARN WARN GRN-C003 new-import-time-exec: 4.87.2 adds import-time calls to sensitive APIs in 1 module(s) - telnyx/_client.py:7782 calls subprocess.run (in setup(), reached at import) - telnyx/_client.py:7786 calls urllib.request.Request (in setup(), reached at import) - telnyx/_client.py:7787 calls urllib.request.urlopen (in setup(), reached at import) - telnyx/_client.py:7801 calls subprocess.Popen (in setup(), reached at import) - telnyx/_client.py:7810 calls subprocess.Popen (in FetchAudio(), reached at import) WARN GRN-T004 no-matching-tag: github.com/team-telnyx/telnyx-python has a tag for 4.87.0 but none for 4.87.2 - 4.87.0 → tag v4.87.0 at fa704347b541de2884fa34021b805d0bda544ae8 - 4.87.2: no tag named 4.87.2, v4.87.2, telnyx-4.87.2 or telnyx-v4.87.2 in github.com/team-telnyx/telnyx-python verdict: warn SUMMARY incident lightning-2.6.2: CAUGHT by GRN-C003, GRN-T004 incident lightning-2.6.3: CAUGHT by GRN-C003, GRN-T004 incident elementary-data-0.23.3: CAUGHT by GRN-C001 (with today's tags: GRN-C001, GRN-T004) incident litellm-1.82.7: CAUGHT by GRN-C003 incident litellm-1.82.8: CAUGHT by GRN-C001, GRN-C003 incident telnyx-4.87.1: CAUGHT by GRN-C003, GRN-T004 (with today's tags: GRN-C003) incident telnyx-4.87.2: CAUGHT by GRN-C003, GRN-T004 EXIT 0