The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of devices during the attack. [...]
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens
Résumé + lien vers la source. Sans paywall, sans tracking.