FOLLOW A THREAD

凭证窃取

Connect scattered updates into a story you can understand.

MarketNews10/22, 11:48

LiteLLM Malicious version 1.107.0 disclosed to be capable of stealing credentials and keys

PANews cited SlowMist as disclosing that LiteLLM’s malicious version 1.107.0 affected PyPI packages and some Docker floating tags, could steal sensitive credentials when Python starts, and supported remote code execution. The relevant versions were reportedly removed or replaced.

MarketNews10/21, 23:36

LiteLLM 1.107.0 supply-chain poisoning exposed; affected packages and images have been taken down

Beating AI reports that JFrog found that LiteLLM 1.107.0 PyPI installation packages and official Docker images contained malicious code that could steal multiple types of credentials. The report says the relevant versions and images have been taken down, and users should rotate sensitive credentials.

# Technology Developments # Supply-chain attack # LiteLLM # Credential theft # Malware

All loaded2 shown · 12 per batch

Loading…