784 matches found
GHSA-5MG7-485Q-XM76 Two LiteLLM versions published containing credential harvesting malware
After an API Token exposure from an exploited trivy dependency, two new releases of litellm were uploaded to PyPI containing automatically activated malware, harvesting sensitive credentials and files, and exfiltrating to a remote API. Anyone who has installed and run the project should assume an...
TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign
Hackers compromised Trivy, Checkmarx, and LiteLLM in a supply chain attack, stealing cloud credentials, tokens, and crypto wallet data from developers...
PT-2026-30376
After an API Token exposure from an exploited trivy dependency, two new releases of litellm were uploaded to PyPI containing automatically activated malware, harvesting sensitive credentials and files, and exfiltrating to a remote API. Anyone who has installed and run the project should assume an...
Your AI Stack Just Handed Over Your Root Keys: Inside the litellm PyPI Breach
Litellm PyPI breach explained: malicious versions steal cloud credentials, SSH keys, and Kubernetes secrets. Learn impact and urgent mitigation steps...
Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaign
LiteLLM is the latest victim of TeamPCP’s open-source attack spree. Malicious versions 1.82.7 and 1.82.8 abuse Python’s .pth mechanism for stealthy persistence. The malware exfiltrates cloud credentials, CI/CD secrets, and keys to attacker-controlled domains...
TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise
TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persistent backdoor. Multiple security vendors,...
Two litellm versions published containing credential harvesting malware
After an API Token exposure from an exploited Trivy dependency,two new releases of litellm were uploaded to PyPI containing automatically activated malware,harvesting sensitive credentials and files, and exfiltrating to a remote API.The malicious code runs during importing any module from the...
PYSEC-2026-2 Two litellm versions published containing credential harvesting malware
After an API Token exposure from an exploited Trivy dependency, two new releases of litellm were uploaded to PyPI containing automatically activated malware, harvesting sensitive credentials and files, and exfiltrating to a remote API. The malicious code runs during importing any module from the...
Malicious code in litellm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 6a89401cbf53902e8374fbf3b424a77bb5e5f8c437176232eab7c3237d10ecbe LiteLLM was compromised through trivy security scan in a GitHub workflow. Attackers uploaded malicious versions of LiteLLM to PyPI. The...
MAL-2026-2144 Malicious code in litellm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 6a89401cbf53902e8374fbf3b424a77bb5e5f8c437176232eab7c3237d10ecbe LiteLLM was compromised through trivy security scan in a GitHub workflow. Attackers uploaded malicious versions of LiteLLM to PyPI. The...
Embedded Malicious Code
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Embedded Malicious Code. Vulnerable releases of this package were compromised with malicious code that conceals a multi-stage credential stealer and persistent backdoor. A...
0din-litellm-shield (>=0.2.0, <=0.3.0), 0token (>=0.1.0, <=0.4.0) +3830 more potentially affected by unknown CVE via litellm (>=0.1.400, <=1.105.0rc1)
litellm PYPI version =0.1.400, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.0.13, =0.0.13, =0.1.3, =0.0.4, =0.1.0, =0.3.5, =0.1.1.dev1, =0.2.2, =0.2.1, =0.2.0, =0.6.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-15762713...
CVE-2026-33123 vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
GHSA-QPXP-75PX-XJCP vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
CVE-2026-31958 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-gpu-jupyter, dask-kubernetes, litellm, mitmproxy, airflow, tensorflow-cpu-jupyter...
GHSA-QJXF-F2MG-C6MC vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-gpu-jupyter, dask-kubernetes, litellm, mitmproxy, airflow, tensorflow-cpu-jupyter...
GHSA-HQMH-PPP3-XVM7 vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...
CVE-2026-31826 vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...