SlowMist has detected that LiteLLM has again been targeted by a supply chain attack. The malicious version, litellm@1.107.0, ...
ME News reports that on October 22 (UTC+8), according to SlowMist monitoring, LiteLLM has again been targeted by a supply ...
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
11hon MSN
From eMudhra to PHP: Breach spree hits tech infrastructure, AI emerges as threat multiplier
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...
A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...
PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results