THE popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed throug...
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Article by CyberSIXT
Timeline Coverage
Swipe to explore timeline
-
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
thehackernews.com
-
Malicious LiteLLM Release Steals Cloud, AI and Developer Credentials
securityonline.info
-
AOMEI Backupper Update Attack Exposed Millions to Malware and Credential Theft
securityweek.com
-
Compromised Rank Math PRO Update Could Give Attackers Persistent Access
securityweek.com
-
GhostAction Hides Credential Stealer in a Font Across 94 GitHub Repos
thehackernews.com
-
Google Infiltrated TeamPCP as Supply Chain Campaign Hit 1,000 Firms
arstechnica.com