Popular LiteLLM library hacked, version with hidden malware released
LiteLLM version 1.107.0 was compromised in a supply chain attack using stolen GitHub OAuth tokens. Attackers triggered and approved malicious releas…
Tech news from the best sources
LiteLLM version 1.107.0 was compromised in a supply chain attack using stolen GitHub OAuth tokens. Attackers triggered and approved malicious releas…
MemTensor: When an AI Memory Plugin Becomes the Credential Collector StepSecurity reported that the open-source AI memory framework MemTensor had it…
PyPI now rejects new file uploads against any release older than 14 days, closing off a small but useful window that a compromised publishing token…