Security · Updated 21 Oct, 11:31 pm IST
LiteLLM PyPI Release Compromised, Delivered Credential Stealer and Backdoor
Why it matters for readers: It shows how attackers can hide malicious files in package builds to steal credentials and maintain access, and how registries and projects respond.
- The compromised LiteLLM 1.107.0 wheels (all platforms) installed files that run on every Python process and included a credential stealer and a remote code execution backdoor.1
- PyPI quarantined the malicious LiteLLM release and corresponding malicious Docker images were removed from registries.12
- LiteLLM says the attacker acted through three engineers' GitHub accounts, apparently using stolen GitHub CLI OAuth tokens, and the implicated tokens have been revoked.2
- The compromised wheel included extra build data that caused a cook/ folder to be installed into site-packages, enabling the malicious behavior, while earlier release candidates and 1.106.2 are reported clean.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get startedHow this story developed
21 Oct, 07:30 pm · Hacker News (100+ points)
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
21 Oct, 11:31 pm · The Hacker News
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor