OS-level package firewall open-sourced after LiteLLM backdoor
The Hacker News listing only shows a link to github.com/usestrix/firewall, with 22 points and one comment.
22
Product
LiteLLM
- Mentions · 7d6
- Mentions · 30d37
- All mentions55
- First seenAug 12, 2026
- Last mentioned4d ago
Timeline
55 articles · newest firstCheck Point weekly brief covers Onamae intrusion, PHP exploits, GitLab RCE
The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.
66
Unrevoked LiteLLM key used to publish credential-stealing PyPI package
Microsoft said the malware ran on every Python startup, and stolen AWS keys were checked against Amazon AI models.
76
Security Affairs issues fifth AI and cybersecurity newsletter
The roundup cites claimed OpenAI data-access incidents, a LiteLLM supply-chain compromise, and about $800 million in UK AI security funding.
22
Leaked LiteLLM master key used to steal GitHub tokens and publish malicious 1.107.0
An unrevoked Agent Platform key from May let an attacker publish LiteLLM 1.107.0 to PyPI on October 21; PyPI later quarantined it.
78
LiteLLM GitHub secrets taken 11 days before malicious package release
October 10 and 12 workflows posted CI secrets to webhook.site; a key committed May 27 was never revoked.
76
Compromised LiteLLM 1.107.0 steals credentials via Python startup
Starting Python with the package installed can run PRIVCOLLECT without importing LiteLLM; removing the package does not recover credentials.
88
AINews 'Black October' roundup clusters AI-linked security disclosures
The digest says many incidents were found earlier and disclosed together, while exploitation scale is disputed.
38
Malicious LiteLLM 1.107.0 packages hit PyPI and Docker Hub
The poisoned build was online about three hours, downloaded over 49,000 times, and the latest clean release is 1.106.2.
78
LiteLLM release pipeline hacked to distribute info-stealer malware
Malicious LiteLLM 1.107.0 wheels and images were live for hours on October 21; roll back to 1.106.2 and rotate secrets.
78
Malicious LiteLLM v1.107.0 on PyPI and Docker stole credentials
The build stayed up for under two hours on PyPI; anyone who installed it is told to rotate credentials, not only upgrade.
82
Malicious LiteLLM 1.107.0 published after suspected token leak
Unpinned installs for a few hours on October 21 pulled a credential stealer and an hourly remote-code backdoor.
78
LiteLLM supply-chain attack reported on PyPI and Docker
The supplied page text does not describe the malicious packages, payloads, or who was affected.
46
October 21 fixes cover PHP2Shell, LiteLLM theft, and VPN attacks
Fixed PHP builds are 8.5.12, 8.4.27, 8.3.36, and 8.2.35; LiteLLM 1.107.0 stole secrets, so pin 1.106.2 and rotate them.
86
LiteLLM 1.107.0 release carried credential-stealing malware
Malicious Python startup hooks can collect cloud and AI credentials even when applications never import LiteLLM.
78
PHP, Node.js, LiteLLM and an Indian CA hit in one day
NSA told PHP users to update or go offline; LiteLLM malicious packages stole credentials and included a RAT.
78
Malicious LiteLLM 1.107.0 steals credentials and installs a RAT
PyPI and Docker removed the trojanized release within hours; the latest safe version named is v1.106.2.
80
Malicious LiteLLM 1.107.0 ships stealer and backdoor
PyPI quarantined the release and Docker images were removed; users should pin 1.106.2 and rotate exposed credentials.
76
Malicious LiteLLM 1.107.0 on PyPI shipped an infostealer and RAT
All seven wheels and several Docker tags were tainted; PyPI removed the release, and Wiz calls 1.106.2 the latest safe build.
82
Compromised LiteLLM 1.107.0 on PyPI installs a stealer and backdoor
All seven wheels run the implants in every Python process; PyPI removed the release, and 1.106.2 plus two release candidates are clean.
78
Trojanized LiteLLM 1.107.0 on PyPI steals credentials
PyPI quarantined the upload within about two hours; matching Docker tags included latest, main-latest and main-stable.
82
Malicious LiteLLM 1.107.0 published with a credential stealer
PyPI and official Docker tags carried the release for about two hours; the RAT dead-drop never delivered a live second stage.
78
Respan launches open-source Rust AI gateway built from plugins
The pre-alpha gateway, under MIT or Apache-2.0, lets teams add providers and features without changing a small core.
34
Check Point weekly brief: utility and app breaches, exploited zero-days
CenterPoint says more than 1 million Texans were exposed, while Burger King Japan cites about 11.18 million members.
64
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
Check Point warns LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 can give any user admin access and code execution.
80
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.
68
9 Best AI Gateways in 2026: Bifrost, Portkey, LiteLLM, Kong and 5 More Ranked
MarkTechPost ranks nine 2026 AI gateways, placing self-hosted Bifrost first and noting Portkey's Palo Alto deal.
36
When LLM Gateways Go Wrong: Findings from LiteLLM
Check Point found patched LiteLLM flaws enabling config takeover, file read, RCE, and key theft.
76
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.
52
Hackers Use GitHub-Hosted Poem to Control PoeLLM Malware Targeting AI Infrastructure
PoeLLM malware uses a GitHub poem to derive C2 addresses and mine cryptocurrency on more than 3,400 exposed AI servers.
78
PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion
PoeLLM has compromised over 3,400 servers, mining cryptocurrency and spreading through exposed AI and web apps.
78
Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
PoeLLM malware has infected over 3,000 servers since April, hiding command-and-control in a GitHub poem while mining cryptocurrency.
80
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
PoeLLM malware has infected over 3,400 servers to build a cryptomining botnet called Canto Incognito.
74
PoeLLM malware infects exposed AI servers in cryptomining attacks
PoeLLM cryptomining malware has compromised over 2,100 exposed AI servers, using GitHub poems for command-and-control.
76
PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
PoeLLM malware has compromised over 3,400 servers, encoding its command-and-control address in a GitHub poem.
77
Pwn2Own Ireland 2026 - The Full Schedule
ZDI posted the Pwn2Own Ireland 2026 schedule, with over 60 entries including phones and AI targets.
55
The vulnerabilities AI finds are the ones attackers want
GTIG says AI-found flaws skew toward remote code execution, and attackers hit BeyondTrust CVE-2026-1731 within four days.
80
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Unauthenticated Bifrost flaw CVE-2026-90898 lets attackers run commands and steal provider API keys.
74
An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang
Google revealed a Mandiant undercover analyst infiltrated TeamPCP, letting it warn hundreds of victims and disrupt the gang's supply chain attacks and extortion.
82
Litelm: LiteLLM Without the Bloat
New open-source project Litelm launched on GitHub as a leaner alternative to the LiteLLM multi-provider LLM gateway.
14
Related CVEs
by mentions- CVE-2026-4227191%8.7Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
- CVE-2026-59822<1%8.8Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
- CVE-2026-3502925%8.7Broken Access Control in LiteLLM AI Gateway Enables Authenticated RCE
- CVE-2026-4871070%6.5HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
- CVE-2026-59821<1%2.1LiteLLM: LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the…
- Authenticated SSRF in LiteLLM Proxy via user_config
- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-958619%9.3Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-8354910%7.8Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
Appears with
- BerriAIvendor · 15
- Wizorganization · 11
- CISAorganization · 9
- TeamPCPthreat actor · 9
- Socketorganization · 9
- LiteLLMvendor · 8
- PyPIorganization · 7
- Ollamaproduct · 7
- Trivyproduct · 7
- Gotenbergproduct · 6
- Ivantivendor · 6
- Giteaproduct · 6
- FBIorganization · 6
- PoeLLMmalware · 6
- GitHuborganization · 6
- Black Lotus Labsorganization · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.