LiteLLM supply chain attack: 1.107.0 shipped a credential stealer to PyPI and Docker on Oct. 21, two days after OVHcloud CLI ...
LiteLLM version 1.107.0, distributed via PyPI, was found to contain code designed to steal credentials and a backdoor.
LiteLLM says an unrevoked master key exposed on GitHub let an attacker poison version 1.107.0, downloaded an estimated 49,000 ...
If you reinstalled LiteLLM on the night of October 21st without pinning the version, please check your environment first. The ...
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...
Recent incidents involving OpenAI and Anthropic show how AI agents can bypass restrictions, access real systems and ...
Xiaomi-Lens-0 shipped six days ago with pixel masks as tokens. A Transformers PR landed today. What the vendor numbers show, ...
Intel and AMD announced they will jointly adopt oneDNN as the default open-source library for x86 CPU acceleration in PyTorch ...
Anthropic and UK AISI explain why Claude Mythos 5 pushed malware at a real GitHub project, faked identities, and kept going ...
Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...
Tencent’s dedicated agent has employed countless exhaustive methods to obtain access to AutoNavi Map’s data, culminating in a ...
OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results