A Security Scanner Got Hacked and Now Your AI Stack Might Be Compromised
A vulnerability scanner called Trivy got compromised, leading to poisoned LiteLLM packages (1.82.7 and 1.82.8) containing credential stealers, Kubernetes lateral movement tools, and persistent backdoors.
Read essay →