LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...

A security researcher reported a supply chain attack that involved an official software repository for the Python programming language. How did this supply chain attack work? There isn't a sysadmin or ...

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...