Trendora

cook.pth

Assess

Languages & Frameworks

A Python path configuration file that can execute import statements at startup.

Why it's here

Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.

Evidence (1)

  • 9Hacker News·10/21/2026security
    Compromised LiteLLM 1.107.0 on PyPI Ships Credential Stealer and Backdoor

    The PyPI release of LiteLLM 1.107.0 was found to include a credential stealer and a remote code execution backdoor, delivered through files installed into site-packages. The malicious code reportedly harvested secrets such as SSH keys and cloud credentials, then exfiltrated them and downloaded additional code; PyPI has removed the release.