This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
If you reinstalled LiteLLM on the night of October 21st without pinning the version, please check your environment first. The ...
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...
The community label “Black October” is circulating for the cluster of security disclosures that landed between Oct 19 and Oct ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...
Within six days, four major cyber alerts related to digital infrastructure emerged. From SBI to the Rajasthan Police, eMudhra ...
LiteLLM's release pipeline was compromised on October 21, 2026, and a malicious v1.107.0 was published to PyPI, Docker Hub ...
SlowMist has detected that LiteLLM has again been targeted by a supply chain attack. The malicious version, litellm@1.107.0, ...
ME News reports that on October 22 (UTC+8), according to SlowMist monitoring, LiteLLM has again been targeted by a supply ...