Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

We just analysed the payload. Technical details here: https://safedep.io/malicious-litellm-1-82-8-analysis/

We are looking at similar attack vectors (pth injection), signatures etc. in other PyPI packages that we know of.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: