Python Package Index Supply Chain Attack via Malicious .pth File

A malicious version of the popular Python package litellm (v1.82.8) was compromised with a .pth file that executes code automatically whenever any Python interpreter starts, even without importing the package. This attack demonstrates how supply chain vulnerabilities can achieve persistent system compromise through legitimate package management systems. The incident underscores the critical need for software bill of materials (SBOM) tracking, supply chain security frameworks, and rigorous third-party component validation. Organizations relying on open-source packages face significant risk when automated execution mechanisms are exploited by threat actors.

Tactical Insight

Immediate actions

Audit all Python environments for litellm version 1.82.8 and remove immediately
Scan systems for unexpected .pth files in Python site-packages directories
Implement package integrity verification before installation

Long-term improvements

Deploy automated SBOM generation and tracking for all software dependencies
Establish approved package repositories with security scanning capabilities
Implement SLSA framework requirements for supply chain security

Detection measures

Monitor Python package installations and modifications in production environments
Set up alerts for automatic code execution files (.pth) being created or modified
Enable file integrity monitoring on Python installation directories