#pypi

Introduction: The Breach and Its Origins On October 21, LiteLLM’s ecosystem was shaken...

Prerequisites Pick a package name that isn't already taken on...

An unrevoked master key exposed in a public repository allowed attackers to infiltrate the LiteLLM release pipeline, resulting in the malicious v1.107.0 re

Introduction: The Silent Threat in LiteLLM 1.107.0 On October 21, a malicious version of...

How a .pth file in LiteLLM 1.107.0 ran a credential stealer before any import, and the checks that answer whether you were exposed.

Publishing a Python package to PyPI can be straightforward, but mistakes will happen. Some of them...

Introduction and Overview The litellm 1.107.0 package on the Python Package Index (PyPI)...

The malicious LiteLLM 1.107.0 release on PyPI did not wait for you to import it. Installing the wheel...

LiteLLM disclosed that attackers compromised security controls to publish a malicious package version featuring a backdoor and credential stealer to PyPI a

By Krasen Slavov, GBTI Network Supporter. Originally published on gbti.network. NameDaemon is about...

Tuần này trên Hacker News có một tin khiến nhiều team Python mất ngủ: một bản LiteLLM bị compromise...

LiteLLM version 1.107.0 was compromised in a supply chain attack using stolen GitHub OAuth tokens. Attackers triggered and approved malicious releases cont