← All stories

AI security

LiteLLM Hit by Second Supply Chain Attack This Year, Users Urged to Rotate Credentials

By Help Net Security1 min read

A malicious LiteLLM release pushed to PyPI and Docker registries carried malware designed to steal cloud logins, developer secrets and AI service API keys, according to Help Net Security. It is the second supply chain compromise of the project this year, and users are being urged to rotate their credentials.

Cover for a ai-security story

The LiteLLM project has been compromised in a supply chain attack for the second time this year, Help Net Security reported. According to the outlet, a malicious release of LiteLLM was pushed to the PyPI package index and to Docker registries on Wednesday, carrying malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it.

Security researcher Kevin Beaumont highlighted the incident on Mastodon, writing: "LiteLLM got compromised… again." Users who installed the tainted release are being urged to rotate their credentials as a precaution.

The attack follows an earlier supply chain incident affecting LiteLLM in March. In August, Hudson Rock analyzed a 153GB archive of data stolen during that earlier attack and linked it to 2,488 corporate domains, including AWS, Samsung, Cisco and Salesforce, according to the report.

LiteLLM is a widely used open-source library that lets developers route calls to multiple large language model providers through a single interface, which means installations often hold API keys and other sensitive secrets for numerous AI and cloud services. That makes a compromised package especially damaging, since a single poisoned release can expose credentials across many downstream environments at once.

The repeat compromise underscores the persistent risk that malicious package releases pose to open-source ecosystems and AI development workflows, and the importance of pinning dependencies, verifying releases and rotating secrets after exposure.

Source: Help Net Security

Cover for a ai-security story

AI security

Apple Adds Setting to Exclude Apps from Siri AI, EFF Says

Apple's latest device update, iOS 27.2, introduces a setting that lets users exclude apps from Siri AI features, according to the Electronic Frontier Foundation, which says the change addresses a request from its Encrypt It Already campaign.

1 min read

AI-written summary Source: EFF Updates · Fetched

Cover for a ai-security story

AI security

Unit 42 Warns of Peak Season Cyber Threats Targeting Retailers

Unit 42 has outlined the key cyber threats facing retailers during the peak shopping season, ranging from ransomware to attacks involving artificial intelligence, along with guidance on defending operations and customer trust.

1 min read

AI-written summary Source: Unit 42 · Fetched

Cover for a ai-security story

AI security

GitHub's npm package firewall can block brand-new versions before they install

GitHub has announced a package firewall for npm that checks packages against an enterprise's policy before they install, blocking known malware, critical vulnerabilities and brand-new versions, Help Net Security reported. The checks run before a package reaches a developer's laptop, a build or a coding agent.

1 min read

AI-written summary Source: Help Net Security · Fetched

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.