Search results for Docker Hub
AI & Enterprise
LiteLLM deployment system compromised after admin key exposed by mistake
LiteLLM, a tool for connecting AI models, had its deployment system taken over by hackers after an administrator key was mistakenly made public, The Hacker News reported on Oct. 24. LiteLLM disclosed that a configuration file uploaded to a public GitHub repository on May 27 contained an agent platform master key. The firm removed the file but did not revoke the key, enabling access months later and leading to the distribution of a malicious release.
AI & Enterprise
Security fears spread after flaws found in PHP, Node.js and LiteLLM
Security concerns are rising after vulnerabilities were disclosed in PHP, the open-source JavaScript runtime Node.js and the open-source proxy LiteLLM, TechCrunch reported. Some countries increased website blocks after a critical PHP flaw was found. The U.S. National Security Agency urged organisations using PHP to update immediately or take systems offline. Node.js said it patched four high-risk issues. LiteLLM said attackers implanted malicious code in its software and advised users to follow response guidance.
AI & Enterprise
Tech Insight: Why software supply chains are being breached quickly amid the spread of AI coding
A widely used software package, Axios, was hacked after attackers took over a maintainer account, added a new dependency and shipped an update. The added package installed a tailored remote-access trojan and erased traces, while many security tools failed to flag it. Andreessen Horowitz partners said the case shows software supply-chain risk rising as AI coding spreads. They cited research finding AI agents more often pick vulnerable versions and enable new attacks such as slopsquatting, while detection remains slow in the industry.