Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek. Weiterlesen: LiteLLM Compromised in Fresh Supply Chain Attack
Intelligence View
⚡ tsecurity.de Intelligence
LiteLLM Compromised in Fresh Supply Chain Attack
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1195TA0011 · Command and Control
Supply Chain Compromise
Mitigation: M1045 Code Signing
Quelle: Kontext-Klassifikation des Artikeltextes
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
7 Quellen
CVE-2026-107653 | SureCart Plugin up to 4.9.4 on WordPress Buy Button Block comment cross site scripting (EUVD-2026-114596)
6 weitere Quellen
Ttsecurity.devor 39 Min.CVE-2026-111109 | pfefferle Webmention Plugin up to 5.10.1 on WordPress Webmention Processing Receiver::process cross site scripting (EUVD-2026-114592) Ttsecurity.devor 39 Min.CVE-2026-111254 | Boldgrid W3 Total Cache Plugin up to 2.10.7 on WordPress comment cross site scripting (EUVD-2026-114591) Ttsecurity.devor 39 Min.CVE-2026-116520 | buildwps PPWP Plugin up to 1.9.26 on WordPress Shortcode desc_below_form cross site scripting (EUVD-2026-114579) Ttsecurity.devor 39 Min.CVE-2026-109234 | tigroumeow Meow Lightbox Plugin up to 5.6.4 on WordPress post_content cross site scripting (EUVD-2026-114574) Ttsecurity.devor 39 Min.CVE-2026-109997 | kstover Ninja Forms Plugin up to 3.15.5 on WordPress Input Sanitization nf_ajax_submit formData.extra cross site scripting (EUVD-2026-114576) Ttsecurity.devor 39 Min.CVE-2026-116563 | NextGEN Gallery Plugin up to 4.5.4 on WordPress Output Escaping comment cross site scripting (EUVD-2026-114573)
3 Quellen
CVE-2026-120239 | WAVLINK WN553X1-B V260403_2.0.0 WireGuard CLI /bin/ioos sub_419DA8 file_id os command injection (EUVD-2026-114881)
2 weitere Quellen
Ttsecurity.devor 39 Min.CVE-2026-120240 | WAVLINK WN553X1-B V260403_2.0.0 WireGuard CLI Group /bin/ioos sub_41A748 group_id/group_name os command injection (EUVD-2026-114882) Ttsecurity.devor 39 Min.CVE-2026-120238 | WAVLINK WN553X1-B 260403_2.0.0 ovpn_file /bin/ioos sub_4162A8 file_id os command injection (EUVD-2026-114880)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4291942/it-security-nachrichten/litellm-compromised-in-fresh-supply-chain-attack/