LiteLLM's release pipeline was compromised on October 21, allowing attackers to distribute malicious 1.107.0 packages through PyPI and container registries. The malware targeted cloud credentials, AI-provider keys and developer secrets, prompting urgent recovery guidance.
The post LiteLLM Supply Chain Attack Exposes AI Credentials Through Malicious 1.107.0 Release appeared first on CyberUpdates365 | Latest Cybersecurity News & Vulnerabilities.
source & further reading
cyberupdates365.com — original article
One Hacker Used AI Agents to Breach 100+ Company Websites for About $5,000
Claude Code Finds Hidden Crypto Miner Using 1,175% CPU on Mac
Claude AI Solves 25-Year NSA Cryptography Mystery in Under 30 Minutes