LiteLLM says hackers used GitHub tokens from its own logs to publish a poisoned release. Wiz cited 49,000 downloads and saw ...

OpenAI found a remote code execution flaw in the Brotli compression library, prompting Node.js, Bun, Envoy and PyPI maintainers to ship patches.

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

Attackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, ...

Explore the latest news, real-world incidents, expert analysis, and trends in Malware — only on The Hacker News, the leading ...

LiteLLM version 1.107.0, distributed via PyPI, was found to contain code designed to steal credentials and a backdoor.

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

Hands-on with graphify on httpx: a 2,233-node code graph in 2.1 s with zero LLM tokens, and explain at 628 tokens vs 13,659 to read the file.

Google has replaced its long-standing Python type checker, Pytype, with Pyrefly, an open-source tool originally developed by Meta. The decision was driven by Pyrefly's advantages, including faster and ...

Run claude mcp list afterward to confirm the server registered, then open a Claude Code session in the same project and ask ...