سجل تدقيق مستقل يربط نتيجة البحث بالأدلة والتناقضات وحالة الالتزام والـReadback والمتابعة دون استنتاج حالة غير مسجلة.
Canonical Run ID
ACRIP-SCSE-20261101-001
ناجح · PASS
What ran?GENERAL_DISCOVERY
Discover and select the highest-value current software-supply-chain development; initialize CY-DOM-007 if needed; verify producer compromise vs consumer exposure vs downstream impact without inflating scale.
Why this Topic?LiteLLM 1.107.0 — Release-Pipeline & Official Artifact Compromise
Initialized CY-DOM-007; selected LiteLLM 1.107.0; verified trusted release-pipeline compromise, malicious official PyPI/container artifacts and Python-startup credential theft while preserving affected-system, downstream-propagation and attribution gaps.
EVIDENCE
الأدلة وما تثبته
1 سجل
SCSE-E-0001
Official release pipeline published malicious litellm 1.107.0; all seven PyPI wheels and official Docker/GHCR mutable tags were affected during bounded windows; official GitHub source tag was clean; private enterprise registry stated unaffected.
UNKNOWN
Supports
Producer artifact compromise and exact exposure windows.
Does not prove
Does not prove affected-system/victim count, downstream package count or later credential misuse.
{"Notes":"23M weekly downloads is popularity baseline only.","Gap ID":"SCSE-GAP-001","Impact":"Blocks victim/prevalence and realized blast-radius claims.","Status":"OPEN","Gap Type":"AFFECTED_SYSTEM_DENOMINATOR","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-007","Description":"No reliable public count of hosts/environments that installed and executed LiteLLM 1.107.0 or affected container tags during the compromise window.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101-001","Required Evidence / Resolution":"Version-specific registry telemetry plus execution/IR/provider/customer reporting."}
{"Notes":"Potential propagation ≠ observed propagation.","Gap ID":"SCSE-GAP-002","Impact":"Blocks secondary software-distribution compromise claims.","Status":"OPEN","Gap Type":"DOWNSTREAM_PROPAGATION","Priority":"HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-007,CY-DOM-002","Description":"No verified public denominator/count for internal mirrors, derived images, build outputs or downstream packages incorporating affected artifacts.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101-001","Required Evidence / Resolution":"Registry/cache/SBOM/build provenance, downstream hashes and incident reports."}
FOLLOW-UP
المتابعات غير المحسومة
3 مفتوحة
AFFECTED_SYSTEM_DENOMINATOR
No reliable public count of hosts/environments that installed and executed LiteLLM 1.107.0 or affected container tags during the compromise window.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
DOWNSTREAM_PROPAGATION
No verified public denominator/count for internal mirrors, derived images, build outputs or downstream packages incorporating affected artifacts.
OPEN
Priority: HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
CREDENTIAL_MISUSE_ATTRIBUTION
Credential-stealing capability and release-workflow credential abuse are established, but downstream stolen-secret reuse and October actor identity are not quantified/attributed.
OPEN
Priority: MEDIUM-HIGH · Created: ٠٣/١١/٢٠٢٦، ١:١٣ م
AUDIT TIMELINE
السجل الزمني الكامل
0 حدث
لا توجد run_events تاريخية لهذه الجولة؛ تُعرض حالات Lifecycle أعلاه كما هي من سجل Run ولا يتم اختلاق أحداث بديلة.
{"Notes":"Do not merge with March TeamPCP incident.","Gap ID":"SCSE-GAP-003","Impact":"Blocks post-exfiltration outcome and actor-attribution claims.","Status":"OPEN","Gap Type":"CREDENTIAL_MISUSE_ATTRIBUTION","Priority":"MEDIUM-HIGH","Domain ID":"CY-DOM-007","Topic IDs":"CY-TOP-007,CY-DOM-008","Description":"Credential-stealing capability and release-workflow credential abuse are established, but downstream stolen-secret reuse and October actor identity are not quantified/attributed.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-SCSE-20261101-001","Required Evidence / Resolution":"Cloud/source-control audit logs, victim IR, actor-linked infrastructure and authoritative attribution."}
{"Notes":"Alpine proves failure mode, not prevalence.","Gap ID":"CY-GAP-VEI-B7C4E291-03","Impact":"Blocks quantifying false-remediation exposure.","Status":"OPEN","Gap Type":"RUNTIME_PATCH_PROVENANCE","Priority":"MEDIUM","Domain ID":"CY-DOM-003","Topic IDs":"CY-TOP-VEI-B7C4E291,CY-TOP-007","Description":"No reliable denominator exists for custom GitLab deployments upgraded at the app layer but still using vulnerable Ruby/Onigmo.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-VEI-20261101T100800Z-B7C4E291","Required Evidence / Resolution":"Version-aware GitLab+Ruby telemetry or large-sample authenticated inventory."}
NEW — trusted release path compromise and malicious official artifacts verified; seven PyPI wheels + official container tags affected during bounded window; startup-hook credential theft verified; affected-system count, downstream propagation count, credential misuse and actor identity remain unresolved.