LiteLLM release pipeline hacked to distribute info-stealer malware:
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker ...
bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
type of malware capable of controlling a system through a remote network connection
News on this topic
dlvr.it Oct 21
LiteLLM supply chain attack hoovers up passwords and secrets: Plus a RAT for good measure - get threat hunting now
theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548
Similar to This
Previous
The internet is having a very bad cybersecurity day: From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM ...
techcrunch.com/2026/10/21/the-internet-is-having-a-very-bad-cybersecurity-day/
The New Stack Oct 21
Respan spent two years building on LiteLLM. One upgrade made it start over.: Respan rebuilt its AI gateway in Rust around a small plugin core after 100 ...
thenewstack.io/respan-rust-ai-gateway/
Cryptomining malware used poetry to infect more than 3,400 servers, researchers say — four words in the PoeLLM verse, changed 11 times ...
tomshardware.com/tech-industry/cyber-security/cryptomining-malware-used-poetry-to-infect-more-than-3-400-servers-researchers-say-four-words-in-the-poellm-verse-changed-11-times-point-the-botnet-to-new-servers
Paid articlePaywall
Terabytes of credentials leaked in massive supply-chain attack: The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/
blog.gitguardian.com Aug 15
Inside the LiteLLM Hack: 153GB and 2,488 Organizations: Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March ...
blog.gitguardian.com/inside-the-litellm-hack/
infostealers.com Aug 12
Largest AI Supply Chain Breach of 2026: LiteLLM Hack Impacts Thousands of Global Enterprises – Claim Your Ethical Disclosure
infostealers.com/article/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure/
Copilot, LiteLLM and the AI trust boundary gap: SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks ...
venturebeat.com/security/copilot-searched-your-mailbox-litellm-handed-out-admin
Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw: Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model ...
bleepingcomputer.com/news/security/hackers-are-exploiting-a-critical-litellm-pre-auth-sqli-flaw/
dlvr.it Apr 23
Another npm supply chain worm is tearing through dev environments: : Plus, the payload references 'TeamPCP/LiteLLM method'
theregister.com/2026/04/22/another_npm_supply_chain_attack/
dlvr.it Apr 02
AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack
theregister.com/2026/04/02/mercor_supply_chain_attack/
Report: Cybercriminals steal Cisco source code using stolen credentials: After the supply chain attack on LiteLLM, attackers were able to access internal Cisco ...
heise.de/news/Bericht-Cyberkriminelle-stehlen-Quellcode-von-Cisco-und-dessen-Kunden-11244097.html
dlvr.it Mar 30
Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach: infosec in brief: Also, EU probes Snapchat, RedLine suspect extradited ...
theregister.com/2026/03/30/telnyx_pypi_supply_chain_attack_litellm/
Popular AI gateway startup LiteLLM ditches controversial startup Delve: LiteLLM had obtained two security compliance certifications via Delve and fell victim to ...
techcrunch.com/2026/03/30/popular-ai-gateway-startup-litellm-ditches-controversial-startup-delve/
Delve did the security compliance on LiteLLM, an AI project hit by malware: LiteLLM offers an AI open source project used by millions that was infected by ...
techcrunch.com/2026/03/25/delve-did-the-security-compliance-on-litellm-an-ai-project-hit-by-malware/
github.com Mar 24
[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 — credential stealer · Issue #24512 · BerriAI/litellm
github.com/BerriAI/litellm/issues/24512
![[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82 ...](https://external-preview.redd.it/g3OVbihu9P9KL-zBTK3LLmDTCyYwSLxtG1SVLH4jXsU.png?width=320&crop=smart&auto=webp&s=06d885e59ee473641e1886ca4cfd876839d82c47)
The New Stack Mar 19
Building a Kubernetes-native pattern for AI infrastructure at scale: Master Kubernetes-native AI infrastructure. Scale GPU workloads reliably using KAITO ...
thenewstack.io/kubernetes-native-ai-infrastructure/
Next