Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
Two versions of LiteLLM, an open source interface for accessing multiple large language models, have been removed from the ...
XDA Developers on MSN
A popular Python library just became a backdoor to your entire machine
Supply chain attacks feel like they're becoming more and more common.
Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...
The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...
TeamPCP is the likely cyber threat actor behind attacks on Trivy, Checkmarx, and the LiteLLM AI library — and all signs point ...
A new hacking group has been rampaging the Internet in a persistent campaign that spreads a self-propagating and never-before ...
Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...
An AI-assisted campaign is spreading more than 300 poisoned packages for diverse assets ranging from developer tools to game ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results