How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

2026-03-24来源 Snyk BlogEnglish
How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM
On March 24, 2026, threat actor known as TeamPCP published backdoored versions of the litellm Python package after stealing PyPI credentials via a compromised Trivy GitHub Action in LiteLLM's CI/CD pipeline. Here's what happened, how the three-stage malware works, and how to check if you're affected.

原文：https://www.a8q9.cn/en/article/how-a-poisoned-security-scanner-became-the-key-to-backdooring-litellm-1304ef.html

相关文章