Source profile

blog.gitguardian.com

Evidence-bounded context

A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.

Source classes: Not yet evidenced
Ownership: Not yet evidenced
Funding ties: Not yet evidenced
Declared affiliations: Not yet evidenced
Geographic base: Not yet evidenced
Methodology: Not yet evidenced

Current clusters

science1 distinct publisher

LiteLLM 1.82.7 and 1.82.8 shipped an infostealer: rotate everything those machines touched

GitGuardian says the TeamPCP campaign poisoned two LiteLLM releases on PyPI to harvest SSH keys, cloud credentials and API tokens. Detection is the cheap part of this job.

Publishers:blog.gitguardian.com

Reality

Evidence52
Adoption27

Top News

blog.gitguardian.com

Evidence-bounded context

Current clusters

LiteLLM 1.82.7 and 1.82.8 shipped an infostealer: rotate everything those machines touched

LiteLLM's 40 minutes on PyPI: 153GB of loot, 2,488 named orgs, and the victims nobody can name