English(EN) it ran a .pth stealer on every python start (ssh, cloud, AI tool keys) plus an hourly backdoor. litellm thinks the github tokens came from logs on an internal d

LiteLLM 库被窃取密钥的恶意软件入侵

作者 PulseAugur 编辑部 · [1 个来源] · 2026-10-23 02:40

LiteLLM Python 库发生了一起安全事件，其中一名恶意行为者植入了 .pth 窃取器和每小时一次的后门。该恶意软件针对 SSH、云和 AI 工具密钥，GitHub 令牌可能来自暴露的内部部署上的日志。建议用户从头开始重建，固定到版本 1.106.2，并轮换所有受影响的密钥。 AI

影响 AI 工具密钥的泄露可能导致 AI 开发管道进一步被破坏。

排序理由涉及特定软件库的安全事件。

在 Mastodon — mastodon.social 阅读 →

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 1 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 涉及特定软件库的安全事件。
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: infra, safety; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: Same-day; Cluster formed today. Ranking reflects the current source set at time of score.

完整方法见我们的编辑标准。

报道来源 [1]

Mastodon — mastodon.social TIER_1 English(EN) · mohith808 · 2026-10-23 02:40

it ran a .pth stealer on every python start (ssh, cloud, AI tool keys) plus an hourly backdoor. litellm thinks the github tokens came from logs on an internal d

it ran a .pth stealer on every python start (ssh, cloud, AI tool keys) plus an hourly backdoor. litellm thinks the github tokens came from logs on an internal deployment open to the internet installed it? rebuild from scratch, pin 1.106.2, rotate every key the box could reach htt…

链接 docs.litellm.ai/…/security-incident-oct-2…

本文如何被排名

报道来源 [1]

it ran a .pth stealer on every python start (ssh, cloud, AI tool keys) plus an hourly backdoor. litellm thinks the github tokens came from logs on an internal d

相关实体

相关话题