If you are using LiteLLM, please check your version firstOn October 21, 2026, a major security incident was announced ...
LiteLLM’s second 2026 supply chain attack exposed cloud credentials, AI API keys and SSH keys through malicious v1.107.0 ...
The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...
LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw stolen AWS keys tested.
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results