Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credentialstealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it obtained, built from roughly 434,000 files the attackers captured, maps potential exposure to more.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity