curated news BleepingComputer infra

LiteLLM release pipeline hacked to distribute info-stealer malware

// summary

Hackers compromised LiteLLM’s PyPI package and published malicious Docker images that steal credentials, secrets, and environment variables.

// from the source

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]