Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised(github.com)

888 points by dot_treo 7 months ago | 467 comments

GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.

I'm Archiving Picocrypt(github.com)

205 points by jaden 1 year ago | 122 comments

Neovim tee.exe binary dependency exhibiting illegitimate / unauthorized behavior(github.com)

80 points by patadune 1 year ago | 9 comments

Raivo OTP just deleted all tokens after update and is now asking for money(github.com)

43 points by parody577 2 years ago | 16 comments

Debian removes KeePassXC browser integration(github.com)

5 points by 6581 2 years ago | 0 comments

Show HN: Tips to stay safe from NPM supply chain attacks(github.com)

70 points by bodash 1 year ago | 44 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised(github.com)

888 points by dot_treo 7 months ago | 467 comments

GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware(github.com)

367 points by tosh 1 year ago | 263 comments

GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.

Malicious versions of Nx and some supporting plugins were published(github.com)

427 points by longcat 1 year ago | 421 comments

GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.