All Detections

Poellm Elf Strings

avatar
Arnold Chan@slaz
updated 14 days ago002

Detects the PoeLLM ELF payload (masquerading as libgcrypt) via Italian-language poem/agent log strings and embedded LiteLLM MCP exploit strings

YARA