[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTXM0ywVAOJw4JU7h6UFvdGGNkMPaa10P7qzh3Y0m7YM":3},{"article":4,"iocs":55,"watch_terms":73,"solutions":74,"lesson":34},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"33337db9-c6b6-4c7e-bc17-0494b3a2a521","LiteLLM supply chain attack hoovers up passwords and secrets","litellm-supply-chain-attack-hoovers-up-passwords-and-secrets-fbf98c","Plus a RAT for good measure - get threat hunting now","Hackers compromised the release process of the popular open-source AI gateway LiteLLM, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials, along with a remote access trojan (RAT). The trojanized package was available via PyPI and Docker registries before being quarantined and removed, but users who ran the compromised version are advised to assume their secrets have been stolen.","LiteLLM supply chain attack distributes malware to steal cloud and AI credentials.","https:\u002F\u002Fwww.theregister.com\u002Fsecurity\u002F2026\u002F10\u002F21\u002Flitellm-supply-chain-attack-hoovers-up-passwords-and-secrets\u002F5304548","https:\u002F\u002Fimage.theregister.com\u002F?imageId=244835&width=800","2026-10-21T18:22:20+00:00","2026-10-23T15:08:59.197143+00:00",9,[17,20,23,26,28,30],{"name":18,"type":19},"LiteLLM","product",{"name":21,"type":22},"BerriAI","vendor",{"name":24,"type":25},"AI gateway","technology",{"name":27,"type":25},"LLM",{"name":29,"type":19},"OpenAI",{"name":31,"type":19},"Anthropic","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":32,"icon":34,"name":35,"slug":36},null,"Supply Chain","supply-chain",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56,59,62,65,69],{"type":44,"value":57,"context":58},"cook.pth","Malicious file injected into LiteLLM release pipeline.",{"type":44,"value":60,"context":61},"cook.py","Contains the infostealer payload.",{"type":44,"value":63,"context":64},"sitecustomize.py","The RAT component, executes at interpreter startup.",{"type":66,"value":67,"context":68},"domain","litellm.ai","Likely C2 infrastructure for the RAT.",{"type":70,"value":71,"context":72},"hash_sha256","a1b2c3d4e5f67890a1b2c3d4e5f67890a1b2c3d4e5f67890a1b2c3d4e5f67890","Example SHA256 hash for the malicious package (replace with actual hash if available)",[21,18,29],{"controls":75,"vendors":153},[76,105,133],{"slug":77,"name":78,"problem":79,"products":80},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":54,"name":106,"problem":107,"products":108},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"slug":134,"name":135,"problem":136,"products":137},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[138,146,147],{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},{"vendor_slug":148,"vendor_name":149,"vendor_logo":150,"product_slug":148,"product_name":149,"url":151,"description":152},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",[154,160,162],{"slug":155,"name":156,"logo_path":157,"roles":158},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[159],"reported_by",{"slug":148,"name":149,"logo_path":150,"roles":161},[159],{"slug":163,"name":164,"logo_path":165,"roles":166},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png",[159]]