Stories tagged by our AI curator.
Researchers discovered a coordinated campaign targeting 61 public GitHub repositories to steal credentials and access tokens.
LiteLLM open-source AI gateway was compromised in a supply chain attack traced to an exposed master key accidentally committed to GitHub in May.
Researchers discovered a malicious markdown file in a Downloads folder that exploited an AI coding agent to install a rogue npm package, exposing vulnerabilities in autonomous AI workflows.
LiteLLM's PyPI release pipeline was compromised to distribute an info-stealer malware that targets credentials and environment variables through malicious Docker images.
LiteLLM's release process was compromised and a malicious version distributed via PyPI and Docker, containing malware to steal cloud credentials and a remote access trojan.
