Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s second supply chain compromise this year despite security measures introduced after an earlier attack. The compromised version, 1.107.0, was distributed through the Python Package Index... Weiterlesen: LiteLLM release pipeline hacked to distribute credential-stealing mal…
Intelligence View
⚡ tsecurity.de Intelligence
LiteLLM release pipeline hacked to distribute credential-stealing malware
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-stealing malware, marking the project’s s…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1195TA0011 · Command and Control
Supply Chain Compromise
Mitigation: M1045 Code Signing
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 88%
Vind SBOM/afhankelijkheden uit met afhankelijkheidscontrole/trivy, teken en verifieer artefacten via Sigstore (cosign), monitor updatekanalen voor compromissen.
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
18 Bronnen
CVE-2026-99264 | Linux Kernel up to 6.12.114/6.18.59/7.2.13 io_uring/net buffer overflow (Nessus ID 375590)
17 andere bronnen
VVulDB Updates2 uur geledenCVE-2026-99262 | Linux Kernel up to 7.2.13 io_uring io_wq_submit_work race condition (Nessus ID 375588) VVulDB Updates2 uur geledenCVE-2026-99263 | Linux Kernel up to 7.3.0 io_uring io_poll_check_events toctou (Nessus ID 375586) VVulDB Updates2 uur geledenCVE-2026-99261 | Linux Kernel up to 7.2.12 drm-amdgpu buffer overflow (Nessus ID 375587) VVulDB Updates2 uur geledenCVE-2026-99254 | Linux Kernel up to 7.2.13 io_uring io_ring_exit_work resource consumption (Nessus ID 375585) VVulDB Updates2 uur geledenCVE-2026-99253 | Linux Kernel up to 7.2.13 io_uring io_uring_try_cancel_requests cq_wait_nr race condition (Nessus ID 375582) VVulDB Updates1 uur geledenCVE-2026-99259 | Linux Kernel up to 7.2.12 PMC driver tegra_pmc_enter_suspend_mode rate uninitialized variable (Nessus ID 375581)
+11
6 Bronnen
Open Source Friday: pgmq
5 andere bronnen
HHelp Net Security2 uur geledenOpen-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw TTecmint: Linux Howtos, Tuto…4 uur geledenPikaPods: Host Any Open-Source Apps Without a VPS Server ZZDNET5 uur geledenFiling bugs for open-source apps is a huge help for developers – and easier than you think HHelp Net Security3 uur geledenGhostunnel: Open-source TLS proxy with mutual authentication ZZDNET5 uur geledenFiling bugs for open-source apps is a huge help for developers – and easier than you think
5 Bronnen
CVE-2022-48571 | memcached 1.6.7 UDP Packet denial of service (EUVD-2022-51267)
4 andere bronnen
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4289810/malware-trojans-virussen/litellm-release-pipeline-hacked-to-distribute-credential-stealing-malware/