Skip to content
Bulwark Black Bulwark Black LLC
Latest
Malware Crypting Services Show Why Behavioral Detection MattersPrivate Wireless Utility Networks Are Becoming OT Attack PathsKong Mesh Vulnerabilities Show Why Service Mesh Security Needs Control-Plane DisciplineGunra Ransomware Shows Why VPN Compromise Is an Incident, Not a Patch TicketCI Fortify Shows Why OT Isolation Must Be Engineered Before the IncidentLazarus Dream Job Campaign Turns Fake Recruiting Into a Windows Zero-Day IntrusionDeno Runtime Abuse Shows Why Developer Tooling Needs Security GovernanceAeternum Shows Why Blockchain-Based C2 Is a Practical Defense ProblemDeadLock Ransomware Shows Why Recovery Infrastructure Is Part of the Attack SurfaceUNC6671 Shows Why Helpdesk Vishing Is a Cloud Data-Theft ProblemVeloCloud Orchestrator RCE Shows Why SD-WAN Controllers Need Incident ResponseMSI Router Command-Injection Cluster Shows Why Edge Devices Need Exposure ControlJuly CVE Data Shows Why Patch Priority Needs Threat ContextExfilSquad Shows Why CRM and Portal Data Need Extortion-Ready Controls

Indicator of Compromise

litellm[.]cloud

Domain Seen in 2 reports Watch this →

A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.

Included in the Domains feed (live, machine-readable).

Seen in these reports

AI (General) · Jun 12, 2026

Shai-Hulud Shows AI Package Scanners Need Prompt-Injection Boundaries
AI (General) · Apr 1, 2026

LiteLLM Supply Chain Attack: TeamPCP Deploys Multi-Stage Credential Stealer to 95M Monthly Downloads

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

models[.]litellm[.]cloud anthropic[.]comapi[.]anthropic[.]comapi[.]anthropic[.]com/v1/apic539766062555d47716f8432e73adbe3a0c0c954a0b6c4005017a668975e275cdc48b09b2a5954f7ff79ab8a2fd80202bd3b59c08c7cdbc6025aa923cb4c0efee1342a80d4b5e83d2c7c22e1e0aaa95f2d88e3dbf0d853a4994b180c93a4b17dfulcio[.]sigstore[.]devhxxps://api[.]anthropic[.]com/v1/api
Browse all indicators → Machine-readable feeds → Extract IOCs from text →

Newsletter

The House-Of-L Brief.

Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.

Double opt-in. One-click unsubscribe on every issue. We never share your address.