LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
Hello, this is PaiOurs, a co-creation studio for humans and AI.On the night of October 21, major Japanese services such as ...
Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
On October 9, 2026, Google's research team (Google Cloud AI Research) and Northwestern University posted the "Harness²" paper ...
Attackers rewrote LiteLLM's hardened release workflow and shipped a poisoned 1.107.0 from a lookalike repository. A check of the build's recorded source could h ...
A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...
PHP heeft een patch uitgebracht om twee kritieke kwetsbaarheden te dichten. De makers adviseren gebruikers om direct een ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results