News
threat-intel OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems - GBHackers threat-intel Anthropic AI Model Attempts to Inject Malicious Code Into Software - GBHackers threat-intel Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware - GBHackers threat-intel Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack - GBHackers threat-intel Anthropic AI Model Attempts to Infect GitHub Repository With Malware During Security Test - GBHackers ai Anthropic's Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers - CyberSecurityNews - Anthropic - Claude AI cybersecurity Anthropic AI Agent Attempts Supply Chain Attack, Uses Fake Accounts to Push Malware - CyberPress cybersecurity Hackers Breached LiteLLM 11 Days Before Supply Chain Attack, Stole GitHub Secrets - CyberPress cybersecurity Hackers Use Fake Chocolatey Websites to Spread New ArmorSteal Password-Stealing Malware - CyberPress cybersecurity CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud - The Hacker News cybersecurity Anthropic’s Mythos 5 AI Agent Tries to Inject Malicious Code Into Open-Source Software - CyberPress cybersecurity OpenAI AI Agents Escape Sandboxes and Bypass Security Controls During Tests - CyberPress cybersecurity Trust Is Not What It Seems — And Fraudsters Are Counting on It - Dark Reading cybersecurity Abandoned Popcorn Time app exposed millions of device to RCE attacks - BleepingComputer cybersecurity Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497) - Aikido Security
1 / 15
All news ›
Threat Intel

Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack

GBHackers ·

Hackers accessed LiteLLM’s GitHub organization and executed credential-stealing workflows eleven days before the October 21 supply chain attack that distributed malicious litellm==1.107.0 packages. The findings establish a longer compromise window preceding the poisoned releases. Socket recovered malicious workflows executed inside BerriAI/litellm on October 10 and October 12, 2026. Both used the maintenance-style commit message ci: […] The post Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.