个人数字泔水\(⁠◔⁠‿⁠◔⁠)✨ Thinking...http://tg.okhk.nethttp://tg.okhk.net/posts/9127http://tg.okhk.net/posts/9127Wed, 25 Mar 2026 13:30:03 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4833" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b>🔴</b></i> Apifox 被投毒。用户数据可能泄漏。<br /><br />- Apifox 是一个 API 管理与测试平台。<br />- Apifox 的用户统计代码 CDN 在 3/4 后被投毒 [2]，现已恢复至原来版本。<br />- 根据文章分析 (LLM?)，payload 会收集用户设备上的敏感信息及 Apifox 云服务凭据等，也可能造成其它种类的危害。<br />- 托管 payload 的 C2 服务域名为 <code>apifox.it.com</code>；现已停止解析。<br /><br /><a href="https://rce.moe/2026/03/25/apifox-supply-chain-attack-analysis/" target="_blank" rel="noopener" title="rce.moe/~">rce.moe/~</a><br /><br />1. <a href="https://web.archive.org/web/20260305051418/https://cdn.apifox.com/www/assets/js/apifox-app-event-tracking.min.js" target="_blank" rel="noopener" title="web.archive.org">web.archive.org</a>/~<br /><br />linksrc: <a href="https://t.me/renbaoshuo/1058" target="_blank" rel="noopener" title="https://t.me/renbaoshuo/1058">https://t.me/renbaoshuo/1058</a><br /><br /><a href="/search/result?q=%23Security" title="#Security">#Security</a> <a href="/search/result?q=%23Apifox" title="#Apifox">#Apifox</a> <a href="/search/result?q=%23SupplyChain" title="#SupplyChain">#SupplyChain</a>http://tg.okhk.net/posts/9106http://tg.okhk.net/posts/9106Tue, 24 Mar 2026 16:01:08 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4832" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b>🔴</b></i> LiteLLM 被骇，用户数据可能泄漏。<br /><br />受影响版本是 1.82.7 及 1.82.8。<br /><br /><a href="https://github.com/BerriAI/litellm/issues/24512" target="_blank" rel="noopener" title="gh:BerriAI/litellm#24512">gh:BerriAI/litellm#24512</a><br />seealso: <a href="https://news.ycombinator.com/item?id=47501729" target="_blank" rel="noopener" title="HackerNews:47501729">HackerNews:47501729</a><br /><br />linksrc: <a href="https://t.me/bupt_moe/2676" target="_blank" rel="noopener" title="https://t.me/bupt_moe/2676">https://t.me/bupt_moe/2676</a><br /><br /><a href="/search/result?q=%23Security" title="#Security">#Security</a> <a href="/search/result?q=%23LiteLLM" title="#LiteLLM">#LiteLLM</a> <a href="/search/result?q=%23SupplyChain" title="#SupplyChain">#SupplyChain</a><a class="tgme_widget_message_link_preview" href="https://github.com/BerriAI/litellm/issues/24512" target="_blank" rel="noopener" title="[LITELLM TEAM] - For updates from the team, please see: #24518 [Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 PyPI package — credential stealer Summary The litellm==1.82.8 wheel..."> <div class="link_preview_site_name accent_color">GitHub</div> <div class="link_preview_title">[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 — credential stealer · Issue #24512 · BerriAI/litellm</div> <div class="link_preview_description">[LITELLM TEAM] - For updates from the team, please see: #24518 [Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 PyPI package — credential stealer Summary The litellm==1.82.8 wheel...</div> </a>