Pranay Shah

Staff Product Manager

Harness

I am a seasoned security professional with 11+ years of experience across VAPT, vulnerability management, security tooling, and supply chain security. Currently, I serve as a Staff Product Manager at Harness, where I focus on building Supply Chain Security solutions that safeguard software from code to deployment. With a strong foundation in both technical and product leadership, I am passionate about advancing secure software practices and helping teams build with confidence.

Latest from

Pranay Shah

A pinned write-up worth starting with.

Featured

Supply Chain Security

LiteLLM Compromise: Securing AI Pipelines from PyPI Supply Chain Attacks

LiteLLM PyPI was compromised in a supply chain attack, using .pth files and blockchain C2 to steal credentials and execute persistent, multi-stage malware.

Pranay Shah

Roshan Piyush

+ more

March 26, 2026

4 minutes to read

Read the article

All posts by

Pranay Shah

Technical

LiteLLM Compromise: Securing AI Pipelines from PyPI Supply Chain Attacks

LiteLLM PyPI was compromised in a supply chain attack, using .pth files and blockchain C2 to steal credentials and execute persistent, multi-stage malware.

March 26, 2026

4 minutes to read

Technical

Defend Against Shai-Hulud 2.0 Supply Chain Attack with Harness SCS

The Shai-Hulud 2.0 NPM supply chain worm compromised accounts, stole credentials, and infected repos. Harness SCS detects, blocks, and remediates the threat.

November 26, 2025

Company News

Lessons from the NPM Attack

A massive NPM supply chain attack compromised 18+ widely used JavaScript packages with 2B+ weekly downloads after a maintainer fell victim to a phishing email. Malicious code was injected to hijack crypto wallets and blockchain transactions, underscoring the need for stronger OSS defenses.

September 8, 2025

2 minutes to read

No items found.

Technical

LiteLLM Compromise: Securing AI Pipelines from PyPI Supply Chain Attacks

LiteLLM PyPI was compromised in a supply chain attack, using .pth files and blockchain C2 to steal credentials and execute persistent, multi-stage malware.

March 26, 2026

4 minutes to read

Technical

Defend Against Shai-Hulud 2.0 Supply Chain Attack with Harness SCS

The Shai-Hulud 2.0 NPM supply chain worm compromised accounts, stole credentials, and infected repos. Harness SCS detects, blocks, and remediates the threat.

November 26, 2025

No items found.