Tag
high
advisory
Compromised Litellm PyPI Package Versions
2 rules 4 TTPs 1 IOCVersions 1.82.7 and 1.82.8 of the Litellm package on PyPI were compromised in a supply chain attack, potentially impacting numerous users, with recommendations to avoid updating to these versions.
supply-chain
pypi
litellm
compromise
2r
4t
1i
high
advisory
ESXi Root Account Compromise Indication
2 rules 2 TTPsThe detection identifies potentially compromised root accounts on ESXi hosts by monitoring the number of unique IP addresses logging in as root within a short time window, indicating credential misuse or lateral movement.
ESXi
vmware
root-account
compromise
lateral-movement
credential-access
2r
2t