Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
An unrevoked LiteLLM master key enabled GitHub token theft and a malicious PyPI release that steals credentials and installs a backdoor.
Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.
Attackers infiltrated LiteLLM s GitHub organisation eleven days before distributing malware through its software releases with newly recovered records ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results