LiteLLM 1.107.0 Stole Secrets at Python Startup
A leaked key led to LiteLLM 1.107.0’s poisoned release. See how Python…
OVHcloud CLI Release Swap: A Saved Hash Caught the Malware
OVHcloud CLI files were swapped under old version labels on October 19.…
Virtualizor BGP Hijack: Check the Server After the Update
A valid certificate accompanied a malicious Virtualizor update. Check the vendor indicator,…
Packagist iPhone Spyware: Check iOS and the Website Theme
Malicious Packagist themes target older iPhones through streaming sites. Separate phone updates,…
RedC2 npm Packages: Importing Can Infect a Linux Host
RedC2 starts a Linux backdoor when a poisoned npm package is imported.…
arrayref 0.3.10 Malware: Check Rust Builds and CI
Three poisoned Rust crates ran a malicious dependency during builds. Check lockfiles,…
LiteLLM Breach May Have Exposed 2,500+ Organizations
CloudSEK maps 2,500+ organizations in a LiteLLM exposure dataset. Check versions 1.82.7…
BdThemes Plugins Installed Backdoors Through a Poisoned API
Seven BdThemes WordPress plugins loaded a poisoned remote feed that created rogue…
Solidity Pro VS Code Extensions Steal Wallets and API Keys
Malicious Solidity Pro extensions stole wallet data, API keys, SSH keys, and…
NUL1DROPPER npm Malware Runs When a Package Is Imported
NUL1DROPPER runs when poisoned npm packages are imported, not through install scripts.…
QuickFox VPN Malware Installed the FDMTP Backdoor
QuickFox Windows installers delivered the FDMTP backdoor. Check affected versions, local indicators,…
Keyv npm Worm Poisoned 444 Packages: Check Before Rotating Tokens
The Keyv npm worm poisoned hundreds of packages and can react when…