~/.config/sysmon/sysmon.py

Posts referencing this indicator

• Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

  Persistent remote code execution backdoor script installed by the payload.

  2026-05-13