Who knew file servers could be this easy?
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
The community label “Black October” is circulating for the cluster of security disclosures that landed between Oct 19 and Oct ...
This week, updates related to "certificates" were released for Java, Node.js, Go, and Python respectively. While they may ...
Even my Raspberry Pi 5 can host useful AI models ...
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...