Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
LiteLLM says an unrevoked master key exposed on GitHub let an attacker poison version 1.107.0, downloaded an estimated 49,000 ...
An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...
Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw stolen AWS keys tested.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results