Tag
supply chain attack
2 articles

LiteLLM Supply-Chain Attack Exposes 434,000 CI/CD Pipelines
A 40-minute compromise of the open-source AI tool leaked cloud keys and repository tokens from Microsoft, Amazon, Cisco, Samsung, and Salesforce, highlighting security gaps in rapid AI deployment.
LinkedIn Fake Job Offer Deploys Trojanized Node.js App to Steal Credentials
A freelance coding pitch on LinkedIn routed a developer to a GitLab repository laced with malware built for credential theft and remote command execution.