🕵️ privcollect

The items that name it 5

• Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
  writeupas classification.key entities2026-10-23
• SecureChap (@SecureChap) on X
  threadas threat actors2026-10-22It is written here as privcollect (credential-collection component: cloud tokens, private keys, browser data, AI config files, env vars and LiteLLM proxy credentials, zipped and posted to litellm[.]dev/healthcheck).

  credential-collection component: cloud tokens, private keys, browser data, AI config files, env vars and LiteLLM proxy credentials, zipped and posted to litellm[.]dev/healthcheck

• litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
  writeupas classification.key entities2026-10-21
• LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
  writeupas threat actors2026-10-21It is written here as privcollect (identifier of the credential-stealing payload in LiteLLM 1.107.0, delivered via cook.pth, cook.py and sitecustomize.py).

  identifier of the credential-stealing payload in LiteLLM 1.107.0, delivered via cook.pth, cook.py and sitecustomize.py

• LiteLLM 1.107.0 PyPI Wheel Contains a Credential Stealer and Persistent Python Backdoor
  writeupas classification.key entities2026-10-21