Knowledge Category

Supply Chain Attack

22 October 2026 · 1 min read

Compromised LiteLLM 1.107.0 on PyPI Installs Credential Stealer and Backdoor

Summary: Version 1.107.0 of the LiteLLM library published on PyPI was found to contain malicious code. This code steals credentials from systems and creates a backdoor. Version 1.107.0 of the LiteLLM library on PyPI was …

#pypi #supply chain attack #security #malware #ai

20 October 2026 · 2 min read

Fake Web3 Accelerator Spreads Malware via npm Packages and Hijacks AI Agent Traffic

Summary: A deceptive Web3 accelerator is deploying info-stealers and backdoors to Windows and macOS systems through malicious npm packages. These attacks target users with promises of free AI credits for Anthropic …

#security #npm #malware #web3 #supply chain attack