{"data":{"id":"30991065-d699-41a5-8e41-3b961942dd93","title":"GHSA-5mg7-485q-xm76: Two LiteLLM versions published containing credential harvesting malware","summary":"GitHub's Advisory Database published GHSA-5mg7-485q-xm76 on March 25, 2026, covering two malicious releases of the pip package litellm. Versions >= 1.82.7 and <= 1.82.8 were published containing credential harvesting malware, and the advisory lists no patched versions.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-5mg7-485q-xm76","publishedAt":"2026-03-25T14:25:42.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["litellm@>= 1.82.7, <= 1.82.8"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-5mg7-485q-xm76"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-03-25T14:25:42.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}