Type Research & news
A supply chain attack on LiteLLM is reported to have stolen passwords and secrets.
Productlitellm-litellm
Show
Density
…Loading feed…
Loading feed…
No Critical or High events in this view.
Updated
A supply chain attack on LiteLLM is reported to have stolen passwords and secrets.
LiteLLM supply chain attack traced to master key exposed on GitHub for months news.lavx.hu.
LiteLLM has been reported to be compromised, leading to credential theft.
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands…
Microsoft Threat Intelligence analyses the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations.
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
End of feed