Wiz honeypots have detected active campaigns targeting AI infrastructure, including LiteLLM, MCP servers, and various AI frameworks. Attackers are leveraging remote code execution (RCE), blind prompt injection, and memory credential theft. This research provides crucial insights into the evolving threat landscape for AI systems and the methods attackers are using to compromise them.