LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

malware

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM, a popular Python package, was compromised in a supply chain attack, resulting in a credential stealer and a backdoor being distributed through malicious Docker images and PyPI wheels. LiteLLM has taken steps to…

The Hacker News · 4h ago Medium

supply-chain credential-stealer github

malware

LiteLLM supply chain attack hoovers up passwords and secrets

An unknown group of criminals compromised LiteLLM's release process, distributing a malicious version (1.107.0) containing malware designed to steal cloud and AI credentials. The incident follows a previous LiteLLM compr…

The Register · 3h ago Medium

supply-chain malware credential theft

news.mlab.sh

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM supply chain attack hoovers up passwords and secrets