LiteLLM supply chain attack hoovers up passwords and secrets

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
The Hacker News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
WJAR

Studio 10

Chef Terranova gets a fun shaped pasta and sugar pumpkin from Dave's Marketplace to create a dish perfect for fall!Oven Roasted Sugar Pumpkin PastaServes 4Ingre Family friendly Boo-Bash and other fall ...
Mezha

LiteLLM supply-chain attack targets credentials and installs a RAT

A compromised LiteLLM release bundled credential-stealing malware and a remote-access trojan. Anyone who ran version 1.107.0 ...
Tweakers

PHP waarschuwt voor twee ernstige bugs die makkelijk uit te buiten lijken

De makers van PHP waarschuwen website- en softwarebeheerders voor twee ernstige kwetsbaarheden in PHP. Het gaat om remote code execution-bugs die eenvoudig kunnen worden uitgebuit. PHP wil zelf later ...