ESET reviews a week of PHP, kernel, and LiteLLM incidents
PHP fixes shipped October 21; nine firms, including ESET, told NBC News they had seen no successful PHP2Shell attacks.
58
Vendor
LiteLLM
- Mentions · 7d4
- Mentions · 30d8
- All mentions18
- First seenAug 13, 2026
- Last mentioned2d ago
Timeline
18 articles · newest firstPHP2Shell attempts preceded same-week patches for PHP, GitLab and Node.js
GitLab’s unauthenticated RCE is CVSS 10.0 back to version 7.0; LiteLLM 1.107.0 stole credentials and OpenCode keys may have leaked.
84
LiteLLM supply chain attack began with an unrevoked GitHub master key
Poisoned release 1.107.0 carried an infostealer and remote access trojan and drew about 49,000 downloads before PyPI quarantined it.
76
Weekly recap: PHP2Shell scans, Plex2Shell attacks, LiteLLM supply chain
CISA listed four exploited Plex flaws, while a leaked LiteLLM key led to a malicious Python package release.
78
pwn.watch lists GitLab RCE, leaked kernel bugs and LiteLLM compromise
The same live feed also covers BIND GSS-TSIG memory corruption, Node.js security releases, bank AI-agent logins and a Railway environment-variable incident.
68
LiteLLM release pipeline hacked to distribute credential-stealing malware
Malicious version 1.107.0 stayed on PyPI for about two hours on October 21 before removal.
78
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
Check Point warns LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 can give any user admin access and code execution.
80
When LLM Gateways Go Wrong: Findings from LiteLLM
Check Point found patched LiteLLM flaws enabling config takeover, file read, RCE, and key theft.
76
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google's Mandiant planted an undercover analyst inside TeamPCP, the supply-chain gang that breached 1,000+ companies via poisoned open-source packages before two Australian arrests.
88
An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang
Google revealed a Mandiant undercover analyst infiltrated TeamPCP, letting it warn hundreds of victims and disrupt the gang's supply chain attacks and extortion.
82
Litelm: LiteLLM Without the Bloat
New open-source project Litelm launched on GitHub as a leaner alternative to the LiteLLM multi-provider LLM gateway.
14
Hackers Can Turn Vulnerable LiteLLM AI Gateways Into Root Access and Cloud Credential Theft
Wiz found multiple LiteLLM AI gateway flaws, including a CVE-2026-59822 MCP auth bypass added to CISA KEV, enabling root code execution and cloud credential theft.
74
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
Wiz found 294 of 3,074 internet-facing LiteLLM gateways accepted the documented default admin key sk-1234, exposing provider API keys and cloud IAM credentials.
58
Risky Bulletin: Two TeamPCP members arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.
74
Two alleged TeamPCP hackers arrested over global supply chain attacks
AFP and FBI arrested two alleged TeamPCP hackers behind open-source supply chain attacks that stole 500,000+ credentials from 1,000+ organizations.
78
When AI infrastructure becomes the target: Securing gateways and control points
Microsoft Threat Intelligence details attacks on exposed AI workloads exploiting LiteLLM gateways for credential harvesting, persistence, and cryptomining.
60
LiteLLM Supply-Chain Attack - Technology, Banking and Healthcare the Most Affected
TeamPCP planted the SANDCLOCK credential stealer in LiteLLM PyPI releases, exposing credentials across 2,038 repositories at 898 organizations including Microsoft and NVIDIA.
84
153GB of stolen credentials surface after LiteLLM supply chain attack
153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.
90
Related CVEs
by mentions- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-1102641%10.0Unauthenticated RCE in GitLab CE/EE via regex integer overflow
- CVE-2026-3502925%8.7Broken Access Control in LiteLLM AI Gateway Enables Authenticated RCE
- CVE-2026-59822<1%8.8Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
- Authenticated SSRF in LiteLLM Proxy via user_config
- CVE-2026-59821<1%2.1LiteLLM: LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the…
- CVE-2026-4227191%8.7Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
- CVE-2026-4871070%6.5HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
Appears with
- LiteLLMproduct · 8
- TeamPCPthreat actor · 6
- Trivyvendor · 4
- Microsoftvendor · 4
- FBIorganization · 4
- AWSvendor · 3
- GitLabvendor · 3
- Checkmarxvendor · 3
- Googlevendor · 3
- Australian Federal Policeorganization · 3
- CISAorganization · 3
- TanStackvendor · 3
- Wizorganization · 3
- GitHubvendor · 2
- Google Threat Intelligence Grouporganization · 2
- OpenAIai model · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.