Yhn first seen 12 h ago, last 10 min ago, peak #4

Compromised LiteLLM 1.107.0 on PyPI Installed Credential Stealer

Original: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

A compromised version of LiteLLM, 1.107.0, was published on the Python Package Index and installed a credential stealer along with a backdoor on systems using it. Developers who pulled the package during the affected window may have exposed API keys, tokens and other secrets. The incident has raised renewed concerns about dependency supply-chain security in the Python ecosystem and how quickly malicious packages can be caught.

Why now: Developers are rushing to check whether they installed the malicious version and to rotate exposed credentials

LiteLLMPyPISafeDep

Open on hn →

Rank over time, top of the chart is #1. 50 snapshots from 12 h ago to 10 min ago.

Evidence

• Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor · abhisek · 451

API: https://socialmediatrends-api.osmike.com/v1/trends/3124078