Skip to content

Advisories Active incidents Threat map Academy Services Solutions

Expert help Subscribe

Search advisories

Plain-language security advisories for IT teams in Taiwan: what happened, how it developed, and how to fix it. Every sentence is sourced.

Browse

Advisories
Active incidents
Academy
Search
Services
Solutions
Expert help

Data & reports

Threat map
Company filings
Taiwan disclosure report
Glossary

Policies

Methodology
Corrections policy
Disclaimer
Privacy
Terms
security.txt

Stay updated

Email alerts
RSS
Atom
JSON Feed

This site aggregates public information and is not security consulting advice. Test remediation steps before applying.

© 2026 資安通報

Keyword, CVE, vendor, product…

Type

Incident1

Severity

Critical1

Category

Supply chain1

Status

Resolved1

Industry

Technology1
Cross-industry1

Domain

Supply chain1
AI systems1

Organization

BerriAI（LiteLLM）1

Technology

AI / LLM1
Open-source package1
CI/CD & developer tools1

Attack vector

Credential abuse1
Software supply chain1

Impact

Data exfiltration1

Data type

Credentials1

Actor type

Unknown1

Motivation

Unknown1

Language / package ecosystem

Python (PyPI)1

RSS for this query

1 results

▲CriticalSupply chainResolvedOct 21, 2026· updated Nov 11

LiteLLM said its release pipeline was compromised early on October 21 and pushed v1.

Subscribe to this query

LiteLLM release pipeline compromised; version 1.107.0 on PyPI and Docker carried credential-stealing malware for about two hours