/
loss_type:credentials × latest_source_host:thehackernews.com × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · critical

LiteLLM release pipeline compromised: malicious v1.107.0 on PyPI and Docker delivers credential stealer and RAT

On October 21, 2026, attackers compromised the LiteLLM release pipeline and published malicious version 1.107.0 to PyPI, Docker Hub and GHCR. The package carried a credential stealer ("privcollect") and a backdoor that runs remote code every hour, effectively a RAT. LiteLLM suspects the attacker obtained developer GitHub CLI OAuth tokens …

technology software
thehackernews.com · high

GhostAction operators phish GitHub maintainers and plant font-disguised stealer in 94 repositories

The threat actor behind the GhostAction supply chain campaign has expanded beyond malicious GitHub Actions workflows. According to OpenSourceMalware, it now phishes open-source maintainers and plants a second-stage credential stealer disguised as a font file. The shift appears to follow GitHub's October 9 block on the malicious workflow, …

GhostAction technology software development