Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LiteLLM Supply Chain Compromise: Leaked Master Key Led to Malicious PyPI Package — Detection and Response Guide
Introduction LiteLLM disclosed on Friday that a threat actor pushed a malicious version of its widely deployed Python package after obtainin...
LiteLLM Supply-Chain Compromise: Malicious PyPI Package and Docker Images Steal Cloud Credentials — Detection and Response Guide
LiteLLM Release Pipeline Compromised: What Defenders Need to Do Right Now The LiteLLM project — one of the most widely deployed open-source ...
LiteLLM 1.107.0 Supply Chain Compromise: Detecting Python Startup Hook Credential Theft and Remediating Exposed AI Pipelines
Introduction Microsoft Threat Intelligence has published a detailed analysis of a supply chain compromise affecting LiteLLM 1.107.0, one of ...
LiteLLM Supply-Chain Attack (SANDCLOCK/TeamPCP): Credential Exposure Across 2,000+ Repos — Detection and Remediation Guide
Introduction The compromise of LiteLLM — the widely adopted open-source LLM proxy and gateway — is shaping up to be one of the most conseque...
LiteLLM Supply Chain Attack via Trivy Compromise: 2,500+ Organizations Exposed — Detection and Remediation Guide
A Poisoned Python Package in the AI Stack LiteLLM — the popular open-source Python library used to normalize API calls across dozens of larg...
Multi-Vector Infostealer Surge: Lumma, Rhadamanthys & PyPI Supply Chain Attacks — Detection Engineering
Threat Summary OTX pulse data from 2026-04-29 indicates a surge in sophisticated credential theft campaigns utilizing a diverse array of ini...