Yhn first seen 2 d ago, last 1 d ago, peak #1

Compromised LiteLLM 1.107.0 on PyPI Installs Credential Stealer

Original: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Version 1.107.0 of LiteLLM published to PyPI has been compromised, and installing it plants a credential stealer and backdoor on affected systems. Security teams are being urged to check whether they pulled the malicious package and to rotate any secrets that may have been exposed.

Why now: A popular open-source package was trojanized on PyPI, putting developers' credentials and systems at immediate risk.

LiteLLMPyPI

Open on hn →

Evidence

• Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor · abhisek · 582

API: https://socialmediatrends-api.osmike.com/v1/trends/3124078