Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security measures introduced after an earlier attack. The compromised version, 1.107.0, was distributed through the Python Package Index... Weiterlesen: LiteLLM release pipeline hacked to distribute credential-stealing mal…
Intelligence View
⚡ tsecurity.de Intelligence
LiteLLM release pipeline hacked to distribute credential-stealing malware
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s s…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1195TA0011 · Command and Control
Supply Chain Compromise
Mitigation: M1045 Code Signing
Quelle: Kontext-Klassifikation des Artikeltextes
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
19 sources
CVE-2026-106196 | Google Chrome up to 154.0.8037.97 Navigation improper authorization (WID-SEC-2026-3761)
18 more sources
VVulDB Updates6 hours agoCVE-2026-106198 | Google Chrome up to 154.0.8037.97 FileSystem improper authorization (WID-SEC-2026-3761) VVulDB Updates6 hours agoCVE-2026-106199 | Google Chrome up to 154.0.8037.97 Actor improper authorization (WID-SEC-2026-3761) VVulDB Updates6 hours agoCVE-2026-106201 | Google Chrome up to 154.0.8037.97 race condition (WID-SEC-2026-3761) VVulDB Updates6 hours agoCVE-2026-106203 | Google Chrome up to 154.0.8037.97 Autofill information disclosure (WID-SEC-2026-3761) VVulDB Updates6 hours agoCVE-2026-106202 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761) VVulDB Updates6 hours agoCVE-2026-106205 | Google Chrome up to 154.0.8037.97 Passwords missing authentication (WID-SEC-2026-3761)
+12
13 sources
CVE-2026-109090 | x.org libXi up to 1.8.3 heap-based overflow (Nessus ID 374609)
12 more sources
VVulDB Updates3 hours agoCVE-2026-109089 | X.Org libXi up to 1.8.3 DEVICE_RESOLUTION buffer overflow (f7836d0a0 / Nessus ID 374609) VVulDB Updates3 hours agoCVE-2026-94282 | libXi Cookie Conversion wireToEnterLeave out-of-bounds (Nessus ID 374609) VVulDB Updates3 hours agoCVE-2026-94281 | x.org libXi up to 1.8.3 XListInputDevices out-of-bounds (Nessus ID 374609) VVulDB Updates3 hours agoCVE-2026-93544 | x.org libXi up to 1.8.3 XIQueryDevice out-of-bounds (Nessus ID 374609) VVulDB Updates6 hours agoCVE-2026-120252 | cgohlke imagecodecs up to 2026.10.10 Lossless JPEG Define Huffman Table Parser decode_jpegsof3 stack-based overflow (EUVD-2026-114749) VVulDB Updates6 hours agoCVE-2026-71979 | indilib indi up to 2.2.4.2 Message Queue MsgQueue.cpp sprintf stack-based overflow (Nessus ID 374633)
+6
12 sources
Windows 11: Microsoft baute neues Speedtest-Flyout in einem Nachmittag mit KI
11 more sources
VVulDB Updates2 hours agoCVE-2026-62877 | Microsoft Windows up to Server 2025 Win32K buffer overflow (EUVD-2026-56399) VVulDB Updates2 hours agoCVE-2026-62740 | Microsoft Windows up to Server 2025 Windows Imaging uninitialized pointer VVulDB Updates2 hours agoCVE-2026-62752 | Microsoft Windows up to Server 2025 Kerberos buffer overflow WWinFuture News3 hours agoMicrosoft: Fehlende Taskleistenfunktion in Windows 11 ist ein Feature VVulDB Updates9 hours agoCVE-2026-97827 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100428) VVulDB Updates9 hours agoCVE-2026-97826 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100427)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4289810/malware-threat-intel/litellm-release-pipeline-hacked-to-distribute-credential-stealing-malware/