慢雾：LiteLLM发生PyPI供应链攻击，植入的恶意文件可窃取加密钱包等敏感信息

PANews2026-03-25 00:28:00

Favorite

PANews 3月25日消息，慢雾科技首席信息安全官23pds在X平台发文称：“每月下载量高达9700万次的LiteLLM发生PyPI供应链攻击：通过pip install litellm即可窃取敏感信息，包括SSH密钥、云凭据(AWS/GCP/Azure)、Kubernetes配置、Git凭据、环境变量(API密钥)、Shell历史、加密钱包及数据库密码等。”

Disclaimer: This article is copyrighted by the original author and does not represent MyToken’s views and positions. If you have any questions regarding content or copyright, please contact us.(www.mytokencap.com)contact

About MyToken:https://www.mytokencap.com/aboutusArticle Link:https://www.mytokencap.com/news/569215.html

More exciting content is available on
X(https://x.com/MyTokencap)or join the community to learn more:MyToken-English Telegram Group
（https://t.me/mytokenGroup）

Previous:SpaceX计划最早于本周提交IPO申请，筹集超过750亿美元资金

Next:Dragonfly：别被“智能体商业”骗了，大多数AI并不需要加密支付

Bitcoin Nears January High as $85,000 Sell Pressure Clears, U.S. Jobs Data Weakens, Spot ETFs See About $2.7 Billion Net Inflow in September

龙虾看币圈2026-10-02 20:03:27

Fiserv Digital Asset Platform Goes Live as North Dakota’s Roughrider Coin Debuts

Fiserv moved its digital asset platform into production, debuting Roughrider Coin to power faster ba...

blockchainreporter2026-10-02 20:00:00

U.S. September Nonfarm Payrolls Rise Only 29,000; Fed October Rate-Pause Expectations Grow; Bitcoin Rebound in Focus

龙虾看币圈2026-10-02 19:06:02