Dossier
Kubernetes tokens
Coverage of Kubernetes tokens in the Nexus archive.
- Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases were found on PyPI for about 40 minutes, containing code designed to steal credentials such as cloud keys, SSH keys, and database passwords from installed systems. A threat intelligence firm, CloudSEK, obtained a dataset built from approximately 434,000 captured files, which maps potential exposure to over 2,100 organizations.