Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...

Ataque ao LiteLLM compromete pacotes PyPI e imagens Docker, colocando credenciais de nuvem em risco. Veja como identificar e corrigir a ameaça.

Python 官方在 discuss.python.org 發布公告，說明印度憑證機構 eMudhra（emSign）的中繼 CA 安全事件對 Python 使用者的影響。由於 eMudhra 有 8 張中繼 CA ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

LiteLLMの1.107.0が10月21日、PyPIとDockerで改ざんされて配布されました。攻撃者は開発者のGitHubトークンでリリース手順を書き換え、正規の署名付きで認証情報を盗むマルウェアを配布。LiteLLMはトークンの入手元を社内のA ...

LiteLLM 1.107.0 salió con un ladrón de credenciales escondido y el ataque de cadena de suministro duró unas dos horas en ...

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...

This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...

If you reinstalled LiteLLM on the night of October 21st without pinning the version, please check your environment first. The ...