[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIGMZ1x6sr2y9h98EvvTZsfIGa1vkJeksXfkmGRwcku8":3},{"article":4,"iocs":38,"watch_terms":49,"solutions":50,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":22},"cee0fbad-f4a2-486a-a879-125b2532e391","An AI gateway designed to steal your data","an-ai-gateway-designed-to-steal-your-data","Dissecting the supply-chain attack on LiteLLM – a multifunctional gateway used in many AI agents. Explaining the dangers of the malicious code and how to protect yourself.","Attackers compromised the popular LiteLLM Python library and released two malicious versions (1.82.7 and 1.82.8) on PyPI, delivering data-stealing malware to developers. The malware targets AWS credentials, Kubernetes secrets, database configurations, SSH keys, crypto wallets, and establishes persistence in Kubernetes clusters. The attack demonstrates the escalating threat of supply-chain compromises affecting widely-used AI infrastructure components.","LiteLLM Python library trojanized with malicious versions uploaded to PyPI in March 2026.","https:\u002F\u002Fsecurelist.com\u002Flitellm-supply-chain-attack\u002F119257\u002F","https:\u002F\u002Fmedia.kasperskycontenthub.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F43\u002F2026\u002F03\u002F26104331\u002FSL-LiteLLM-compromise-featured-scaled-1.jpg","2026-03-26T11:01:38+00:00","2026-03-26T13:00:11.032999+00:00",9,[],"26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":17,"icon":19,"name":20,"slug":21},null,"Supply Chain","supply-chain",[23,28,33],{"category":24},{"id":25,"icon":19,"name":26,"slug":27},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":29},{"id":30,"icon":19,"name":31,"slug":32},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":34},{"id":35,"icon":19,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[39,42,46],{"type":27,"value":40,"context":41},"LiteLLM trojanized versions 1.82.7 and 1.82.8","Malicious Python packages uploaded to PyPI on March 24, 2026 containing data-stealing payload",{"type":43,"value":44,"context":45},"ip","169.254.169.254","AWS Instance Metadata Service (IMDS) targeted for credential extraction",{"type":43,"value":47,"context":48},"169.254.170.2","Amazon ECS metadata service targeted for container credential theft",[],{"controls":51,"vendors":139},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"slug":82,"name":83,"problem":84,"products":85},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":111,"name":112,"problem":113,"products":114},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",[140],{"slug":141,"name":142,"logo_path":143,"roles":144},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png",[145],"reported_by",{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":157},"malicious-ai-library-steals-developer-credentials","Malicious AI Library Steals Developer Credentials","Attackers successfully compromised the LiteLLM Python library by releasing malicious versions on PyPI that contained data-stealing malware. The malware was designed to harvest sensitive credentials including AWS keys, Kubernetes secrets, SSH keys, and cryptocurrency wallets from developer environments. This supply chain attack demonstrates how widely-used open-source components can become vectors for credential theft and infrastructure compromise. Organizations using affected versions unknowingly installed malware that could provide attackers with access to critical cloud resources and sensitive data.",[151,152,153,154,155,156],"CIS Control 2","CIS Control 16","NIST SP 800-161","NIST SC-3","SLSA Framework","ISO 27001 A.14.2.1",{}]