Threat Research
Threat Research
Long-form analysis. Kill chains, post-mortems, deep dives.
The LiteLLM compromise that landed on PyPI yesterday is a textbook example of the “trust gradient” attack: a popular OSS package, a maintainer who reuses credentials across services, and a build pipeline that publishes whatever the maintainer pushes. Here’s the...