LiteLLM's PyPI Backdoor: What It Means for the AI Skill Supply Chain
TeamPCP pushed a credential stealer into litellm 1.82.7 and 1.82.8 on PyPI via a compromised Trivy action. What it did, and why AI skills are next.
#ci-cd
1 article with this tag.
1 article with this tag.
TeamPCP pushed a credential stealer into litellm 1.82.7 and 1.82.8 on PyPI via a compromised Trivy action. What it did, and why AI skills are next.