https://cybercrime.club/tags/container-images/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSun, 25 Oct 2026 23:03:03 -0400https://cybercrime.club/posts/litellm-1-107-0-pypi-docker-credential-stealer-backdoor/Sun, 25 Oct 2026 23:03:03 -0400https://cybercrime.club/posts/litellm-1-107-0-pypi-docker-credential-stealer-backdoor/A malicious LiteLLM 1.107.0 release on PyPI and Docker registries installed a startup-hook credential stealer and an hourly remote code loader. Anything that ran it should be treated as compromised.vulnerabilities