Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

Mudhra certificates may need replacement after weak keys pushed Java and Python into emergency updates. See which systems ...

Recent cybersecurity incidents have raised concerns among companies and government agencies regarding digital certificates ...

Declare the shapes once on the server, generate everything else: OpenAPI becomes a typed REST client, AsyncAPI becomes a ...

Your old Android phone has plenty left to offer as a home server.

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.

A researcher using the GitHub handle KillaBoi has published a Python proof of concept for the Steal My Bitcoin ...

If you reinstalled LiteLLM on the night of October 21st without pinning the version, please check your environment first. The ...

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...