LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets ...
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals ...
PyPI is popular among Python programmers for sharing and downloading code. Since anyone can contribute to the repository, malware – sometimes posing as legitimate, popular code libraries – can appear ...
Anaconda now hosts 2,500 Arm packages, while NumPy and SciPy publish native wheels to aid data scientists migrating off ...
PyPI, the official third-party registry of open source Python packages has temporarily suspended new users from signing up, and new projects from being uploaded to the platform until further notice.
This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results