LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned version (1.107.0) of the popular open source AI gateway to PyPI and its container registries last Wednesday. This... Weiterlesen: LiteLLM supply chain attack started with an exposed master key
Intelligence View
⚡ tsecurity.de Intelligence
LiteLLM supply chain attack started with an exposed master key
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model s…
Intelligence Digest — free The top security news daily · unsubscribe anytime