LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw ...
LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and ...
The community label “Black October” is circulating for the cluster of security disclosures that landed between Oct 19 and Oct ...
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...
A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...
PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results