Top Tweets for #Litellm
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline https://t.co/sMCfXfi36E
#LiteLLM #GitHub #hijack #tokens #cybersecurity #cyberattack
🧵 Weekly Threat Brief #40 is live.
PHP2Shell: pre-auth RCE in the PHP core, 22.6M exposed. Storm-0940 ran an AI agent through a trusted SaaS app. LiteLLM’s release pipeline fell again.
AI on every side of the week.
🔽 https://t.co/1EfrSxdqSH
#cti #litellm #php2shell #cve
Your application never imported LiteLLM. The malware could still run.
@LiteLLM 1.107.0 used Python startup hooks to steal AI tokens, cloud credentials and SSH keys. Pandurang Terkar and I break down the attack at Gurucul.
#AISecurity #SupplyChainSecurity #LiteLLM
AI中継ライブラリLiteLLMの1.107.0（10/21配布）が改ざんされ、認証情報を盗むマルウェア入りでした。この版をpip/Dockerで入れた人は環境を作り直し、APIキーやクラウドの鍵を交換を。版は1.106.2など事故前のものに固定。
#LiteLLM #サプライチェーン攻撃
LiteLLM Compromised in Fresh Supply Chain Attack https://t.co/RfePasw6kg
LiteLLM Auto Router が気になっていたのと Gemini の無料利用枠が余っていたので分類精度を検証して記事書きました。https://t.co/rljB1yQL6T #zenn #googlecloud #gemini #litellm
Black Friday Incident 4/7
Supply chain compromise:
LiteLLM's CI/CD was hijacked, shipping poisoned PyPI package v1.107.0 to harvest API tokens.
GitLab RCE alerts and secret leaks forced mass key rotations worldwide.
#SupplyChain #DevSecOps #LiteLLM
The attack chain behind the v1.107.0 LiteLLM release（LiteLLM v1.107.0の不正リリースに至る攻撃経路） #LiteLLM (Oct 23)
https://t.co/73qt7X2XOT
LiteLLM 1.107.0の改ざん版がPyPIとDockerで配布された件、原因の調査結果が公開。5月に公開リポジトリへ誤ってコミットされたマスターキーが失効されないまま残り、そこからGitHubトークンを奪われてリリース工程を乗っ取られたそう。漏れた鍵は履歴から消すだけでなく、必ず失効を。#LiteLLM
LiteLLM 1.107.0にマルウェア、原因は5月に漏れて失効し忘れた鍵
#LiteLLM #サプライチェーン攻撃 #Python #AI #セキュリティ
https://t.co/ATBlTzVYcY
If you had to rotate every secret tonight, how long would it take?
This week it was #LiteLLM, #Railway and #OpenCode. Next week it will be a different vendor. The advisory always ends the same way: rotate everything..
You can assume everything was exposed. The hard part is rotating safely when nobody knows who uses each key, while attackers are already testing what they stole.
What you can control is how much a stolen secret is worth: make every secret short-lived, scoped to one workload, issued by policy.
Access based on who the workload is, not what it holds, even for systems that still expect a secret.
We replayed this week with every secret managed that way:
https://t.co/scnSvEJWtA
#schwachstellen LiteLLM: Kritische Schwachstelle CVE-2026-114612 ermöglicht Admin-Übernahme #aigateway #cve2026114612 #litellm #mcp https://t.co/TwkwKGiqUV
¿Cuánto tarda una clave maestra filtrada en acabar en un paquete envenenado? En #LiteLLM, 136 días sin revocarla. Si tienes litellm 1.107.0 en algún entorno o imagen, rota todo lo que tocó. Revocar no cuesta nada. #SupplyChain #DevSecOps
A leaked #LiteLLM master key helped attackers steal #GitHub tokens and poison software releases.
The post-mortem of the attack is a fascinating read, particularly if you are using GitHub:
👇
#AppSec #SoftwareSupplyChainSecuritu
https://t.co/En1lQioKjf
🔴 یک کلید اصلی مربوط به Agent Platform که در اواخر ماه می ۲۰۲۶ بهاشتباه در یک مخزن عمومی گیتهاب منتشر شده بود، در نهایت به مهاجم اجازه داده یک نسخه مخرب از این بسته پرطرفدار پایتون را منتشر کند.
#CyberSecurity #LiteLLM #SupplyChainAttack #PyPI #GitHub
https://t.co/eUliaQkOlR
Inside the #LiteLLM 1.107.0 #supply_chain_compromise: #Credential_theft through #Python startup hooks
https://t.co/HUsKHknh7u
An unrevoked deployment master key exposed in May led to a supply chain attack on LiteLLM v1.107.0 in October, injecting a backdoor.
#LiteLLM #SupplyChain
https://t.co/oNaQjpzKVC
Last Seen Hashtags on Sotwe
gothgirl #sex
Seen from United Kingdom
anxiouspandaa
Seen from United States
น้าสะใภ้
Seen from Thailand
snapchat
Seen from India
younghoe
Seen from Mexico
girl #fight #nude
Seen from Italy
aliabhattai
Seen from United States
使いたくなるでしょ
Seen from United States
minichat filter:videos
Seen from United States
hijabi #aiporn
Seen from Algeria
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers