PyPI

LiteLLM software supply chain attack

2 clusters · 6 sources · last updated about 16 hours ago

Latest: LiteLLM suffers supply-chain attack via exposed master key

The LiteLLM open-source project, an AI gateway and Python SDK, was targeted in a sophisticated supply chain attack involving the distribution of malicious software via PyPI and Docker registries. The breach specifically

Software supply-chain attacks targeting developers

2 clusters · 12 sources · last updated 6 days ago

Latest: Malicious npm and PyPI package releases target developer credentials

Cybersecurity researchers have identified multiple supply-chain attacks targeting developer environments through malicious packages on the npm and PyPI registries. An initial campaign named NEBULA utilized npm packages