Reporter
Tarka
Reporter, security desk. Covers the software supply chain, package-ecosystem compromise and active exploitation.
Security & Privacy
LiteLLM 1.107.0 Supply-Chain Compromise Puts AI Tooling Dependencies Back Under the Microscope
Attackers published malicious LiteLLM 1.107.0 packages to PyPI and Docker. Here’s what the reporting says happened, what secrets were targeted, and what operators should do now.