PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.

Hackers compromised 333 Tor exit nodes and redirected SSH connections to password-stealing servers, according to a researcher ...

Fake Apex Accelerator npm packages deliver Windows stealers and a macOS backdoor while redirecting AI agent requests to ...

Run claude mcp list afterward to confirm the server registered, then open a Claude Code session in the same project and ask ...

Anthropic announced on October 16 that its AI model Claude solved a 25-year-old cryptography mystery in under half an hour, tracing the origin ...

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses ...

Zscaler ThreatLabz has uncovered a July 2026 campaign that hides malware in a trojanized Terraform provider. It targets ...

The short version: scrypt leans on memory, forcing an attacker to buy expensive RAM-heavy hardware instead of cheap GPU ...

Adversa AI researchers have disclosed a GitHub Copilot CLI attack that uses encrypted instructions to extract developer secrets through an attacker-controlled webpage.