LiteLLM's release pipeline was compromised on October 21, 2026, and a malicious v1.107.0 was published to PyPI, Docker Hub ...
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results