A Poisoned LiteLLM 1.107.0 Sat on PyPI for 103 Minutes, Published by the Project’s Own Pipeline From a Repository One Hyphen Away From the Real One
LiteLLM says attackers used three engineers’ stolen GitHub...
LiteLLM says attackers used three engineers’ stolen GitHub...
A Shai-Hulud-linked PyPI wave used startup-time Python hooks and...