Yhn first seen 8 h ago, last 8 min ago, peak #4
Compromised LiteLLM 1.107.0 on PyPI Delivered Credential Stealer
Original: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Version 1.107.0 of LiteLLM published to the Python Package Index was compromised, installing a credential stealer and backdoor on systems that downloaded it. Developers who pulled the package during the affected window are urged to rotate API keys and secrets immediately. The incident renews concern about supply-chain attacks against popular open-source packages.
Why now: A supply-chain compromise of a widely used AI proxy library puts developers' credentials at risk, prompting urgent warnings.
Rank over time, top of the chart is #1. 34 snapshots from 8 h ago to 8 min ago.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/3124078