Incident

LiteLLM supply chain attack hoovers up passwords and secrets

Why it matters: A malicious LiteLLM 1.107.0 release stole cloud and AI credentials and ran a RAT; check whether you installed that version or pulled the litellm/litellm:1.107.0 image and rotate exposed secrets.

Covered by 1 outlet

  • The Register - LiteLLM supply chain attack hoovers up passwords and secrets ()

Published

Start with real signal

See your security surface before you subscribe.

Run the complete AYAsec workflow on Free, then move to the cadence your team needs.

Start scanning free