LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

On October 16, KDDI Research, Inc. released an open-source tool called "Memento" that restores files encrypted by ransomware ...

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

In early September 2026, Microsoft announced Project Zenith, an effort to provide developers with a ready-to-code, ...

Eight certificates from the Indian certificate authority eMudhra rested on secret keys a laptop can recover in under a second ...

An exclusive CBC investigation has found more than 1.5 million tips sent to Canadian Crime Stoppers chapters were captured in ...

Private keys for eight eMudhra intermediate CA certificates have been compromised, allowing attackers to forge certificates for any site. The keys were revealed due to low entropy, not through a known ...

Your browser checks digital certificates every time you visit a secure website, usually without you noticing. But those checks depend on certificate authorities keeping their signing keys secure. A ...

In a written LDS interview, founder and sole developer Gian-Luca Luongo explains the limits of hidden credentials, automatic ...

Attackers rewrote LiteLLM's hardened release workflow and shipped a poisoned 1.107.0 from a lookalike repository. A check of the build's recorded source could h ...

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...

Le rivendicazioni ransomware non verificate impongono di separare l’annuncio criminale dai riscontri tecnici. I casi HYSYTECH ...