A vulnerability has been discovered in the decompression process of Brotli (a compression format commonly used on the web) ...

Ataque ao LiteLLM compromete pacotes PyPI e imagens Docker, colocando credenciais de nuvem em risco. Veja como identificar e corrigir a ameaça.

Python 官方在 discuss.python.org 發布公告，說明印度憑證機構 eMudhra（emSign）的中繼 CA 安全事件對 Python 使用者的影響。由於 eMudhra 有 8 張中繼 CA ...

LiteLLMの1.107.0が10月21日、PyPIとDockerで改ざんされて配布されました。攻撃者は開発者のGitHubトークンでリリース手順を書き換え、正規の署名付きで認証情報を盗むマルウェアを配布。LiteLLMはトークンの入手元を社内のA ...

LiteLLM 1.107.0 salió con un ladrón de credenciales escondido y el ataque de cadena de suministro duró unas dos horas en ...

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.

This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...

Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.