Attack
LiteLLM confirms the compromise of its PyPI packages and its containers on October 21.
Three engineers' GitHub accounts were used according to the publisher, apparently via stolen CLI OAuth tokens.
Python startup files can run the malicious payload without importing LiteLLM.
Meanwhile, Arista confirms active exploitation of CVE-2026-114625 in VeloCloud Orchestrator.
For its part, AWS traced an attempted exploitation of PHP2Shell to October 17 in its MadPot honeypots.