Trivy ecosystem supply chain briefly compromised(github.com)

76 points by batch12 7 months ago | 23 comments

The Marvin Attack(people.redhat.com)

87 points by hardenedvault 2 years ago | 34 comments

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised(github.com)

888 points by dot_treo 7 months ago | 467 comments

GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.

MakuluLinux (6.4M Downloads) Ships Persistent Backdoor from Developer's Own C2(werai.ca)

36 points by werai 8 months ago | 15 comments

OpenWrt Security Advisories(openwrt.org)

32 points by fulafel 3 years ago | 4 comments

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer(github.com)

701 points by theanonymousone 7 months ago | 281 comments

GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.