Brotli bug CVE-2026-111497 draws patches beyond Node.js
Trail of Bits released an audit tool; Node.js credited OpenAI researchers, and real-world exploitation is not stated.
73
Victim
LiteLLM
- Mentions · 7d2
- Mentions · 30d3
- All mentions4
- First seenAug 28, 2026
- Last mentioned5d ago
Timeline
4 articles · newest firstLeaked LiteLLM master key used to steal GitHub tokens and publish malicious 1.107.0
An unrevoked Agent Platform key from May let an attacker publish LiteLLM 1.107.0 to PyPI on October 21; PyPI later quarantined it.
78
Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials
ReversingLabs traces S1ngularity, Shai-Hulud, and TeamPCP campaigns that poisoned npm updates to steal developer and cloud credentials.
58
Risky Bulletin: Two TeamPCP members arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.
74
Related CVEs
by mentions- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
Appears with
- TeamPCPthreat actor · 2
- Telnyxvictim · 2
- Andromedavictim · 1
- Trail of Bitsorganization · 1
- ENGIEvictim · 1
- Trivyvendor · 1
- BerriAIvendor · 1
- OpenAIorganization · 1
- Australian Federal Policeorganization · 1
- CanisterWormmalware · 1
- PyPIorganization · 1
- FBIorganization · 1
- Envoyproduct · 1
- GitHubvendor · 1
- Shai-Huludmalware · 1
- GitHubproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.