Blogs

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

Snyk

On March 24, 2026, threat actor known as TeamPCP published backdoored versions of the litellm Python package after stealing PyPI credentials via a compromised Trivy GitHub Action in LiteLLM's CI/CD pipeline.

Visit Site

What is a Container Registry security?Snyk Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security IncidentSnyk Using Snyk reporting for data-driven securitySnyk Snyk in 30: Open source security for Atlassian Bitbucket CloudSnyk 10 best practices to containerize Node.js web applications with DockerSnyk How to verify and secure your Mastodon accountSnyk Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange Security Implementation for Responsible AI: A Practical FrameworkCybersecurity Exchange How to Conduct an AI Agent Security Audit [+ Checklist]Zapier DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Three Key Design Considerations for an Event-Driven ArchitectureThenewstack Security Considerations for API-Driven Apps Deployed to CloudThenewstack Oso Unbundles Security AuthorizationThenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi IaC Best Practices: Implementing RBAC and SecurityPulumi Docker at Cloud Expo Asia: GenAI, Security, and New InnovationsDocker Docker Networking Drivers - Details and Use CasesDocker Two-factor AuthenticationVercel Get assistant conversations - MintlifyMintlify Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket