Node.js released emergency patches for three versions to fix a critical Brotli compression library flaw (CVE-2026-111497) ...
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...
The malicious LiteLLM 1.107.0 release could not be caught by checking the official GitHub tag alone. Based on the ...
A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...
PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results