Cybersecurity News
Filters
Filtered by tag: ai tools × Clear
LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
Matched: health
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, with all seven wheel files containing a credential stealer and remote access trojan that also spread to Docker images. The malware uses Python startup hooks to run automatically without LiteLLM being directly invoked, targeting SSH keys, cloud credentials, browser passwords, and AI tool tokens. Data is sent to an attacker-controlled domain mimicking LiteLLM infrastructure. PyPI removed the release, but stolen credentials remain at risk. Version 1.106.2 is considered safe.
Massive supply-chain attack sees terabytes of data belonging to some of the world’s biggest and most sensitive organizations leaked online
Hackers compromised a cybersecurity vendor's infrastructure, stole cryptographic signing keys for a widely used AI tool, and published a trojanized version under its legitimate name. The attack exposed terabytes of sensitive data from major organizations worldwide. The breach went undetected for an extended period, highlighting serious risks in software supply chains where a single compromised vendor can affect thousands of downstream users.