LiteLLM package ka malicious version upload hua, credentials chura raha hai

Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide

Oct 21 ko LiteLLM 1.107.0 version PyPI aur Docker pe malicious code ke saath publish hua. Yeh version browser, cloud aur AI secrets ko steal karta hai aur dormant C2 channel rakhta hai.

Updates aur sources (6)

Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.

1. Media reportBleepingComputer23 Oct, 12:42 am
   Malicious Docker images ka distribution highlight hua.LiteLLM release pipeline hacked to distribute info-stealer malware ↗
2. Media reportThe Hacker News22 Oct, 1:58 pm
   Pipeline 4:00 a.m. ko compromised hua.LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release ↗
3. Media reportThe Register21 Oct, 11:52 pm
   Credential stealer aur backdoor dono deliver kiye gaye.LiteLLM supply chain attack hoovers up passwords and secrets ↗
4. Media reportThe Hacker News21 Oct, 11:31 pm
   Credential stealer aur backdoor dono deliver kiye gaye.LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor ↗
5. Media reportDark Reading21 Oct, 10:20 pm
   Threat actor ka naam GlassWorm diya gaya hai.OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors ↗
6. Primary sourceWiz Research21 Oct, 7:14 pm
   Malicious release ko security researchers ne detect kiya aur report kiya.LiteLLM Compromised, Steals Credentials ↗