LiteLLM supply chain attack hoovers up passwords and secrets
LiteLLM supply chain attack distributes malware to steal cloud and AI credentials.
Hackers compromised the release process of the popular open-source AI gateway LiteLLM, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials, along with a remote access trojan (RAT). The trojanized package was available via PyPI and Docker registries before being quarantined and removed, but users who ran the compromised version are advised to assume their secrets have been stolen.
AI summary of the linked source. Not reviewed by an editor. How this works
Run BerriAI?
Get an email when a new story names BerriAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — cook.pth
- malware — cook.py
- malware — sitecustomize.py
- domain — litellm.ai
- hash_sha256 — a1b2c3d4e5f67890a1b2c3d4e5f67890a1b2c3d4e5f67890a1b2c3d4e5f67890