Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
An open-source artificial intelligence model gateway allowed a threat actor to gain owner-level access to its entire GitHub ...
LiteLLM’s second 2026 supply chain attack exposed cloud credentials, AI API keys and SSH keys through malicious v1.107.0 ...
A security researcher reported a supply chain attack that involved an official software repository for the Python programming language. How did this supply chain attack work? There isn't a sysadmin or ...
Syed Quiser Ahmed is AVP, Global Head of Responsible AI at Infosys, a global leader in next-generation digital services and consulting. Between December 25 and 30, 2022, we ran pip install torchtriton ...
A security researcher reported a supply chain attack that involved an official software repository for the Python programming language. How did this supply chain attack work? There isn't a sysadmin or ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results