Sesgo declarado: pendiente
Tono medio
inglés
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the
Framing
- litellm python package
- stealer and backdoor
- software supply chain
- litellm compromised
- distributed through pypi
Leer en The Hacker News▸▾ Emociones experimental
Señal de un modelo entrenado en conversaciones de Reddit; puede no reflejar el registro periodístico.
- desaprobación 32%
- optimismo 25%