LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
While PHP2Shell only impacts PHP web servers, Brotli basically impacts everything, across programming languages. The first ...
The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...
LiteLLM’s second 2026 supply chain attack exposed cloud credentials, AI API keys and SSH keys through malicious v1.107.0 ...
Leaked private keys for eight CA certificates let any attacker impersonate any domain — billions of older devices and ...
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.
LiteLLM version 1.107.0, distributed via PyPI, was found to contain code designed to steal credentials and a backdoor.
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.
SilentNet is a stealer family tracked on MalwareBazaar, mostly Java .jar files. See what is known, what is not, and how to ...
October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...
Three incidents hit at least nine languages and six Linux distributions in 48 hours. If you’re wondering whether you need to ...
Within six days, four major cyber alerts related to digital infrastructure emerged. From SBI to the Rajasthan Police, eMudhra ...