supply-chain attack

Latest news

1. 21 Oct
   LiteLLM PyPI Release Compromised, Delivered Credential Stealer and Backdoor

   The LiteLLM Python package release 1.107.0 was compromised in a supply-chain attack that installed a credential stealer and a remote backdoor. PyPI quarantined the release, malicious Docker images were removed, and LiteLLM says stolen GitHub CLI OAuth tokens were used and have been revoked as it investigates.

   Security · 2 sources

   

Articles

No articles about supply-chain attack yet.