LiteLLM supply chain attack hoovers up passwords and secrets
Attackers compromised LiteLLM’s release process and distributed version 1.107.0 through PyPI and Docker registries, exposing users to malware that steals credentials and installs a remote access trojan. The package was removed within hours, but anyone who ran it should assume secrets may have been taken and investigate affected systems.
LiteLLM is an open-source gateway for several large language model providers, with about 23 million weekly downloads. The malware targets browser logins, cloud credentials, AI service API keys, SSH and GPG keys, among other data; its trojan can also receive commands from the attackers. Version 1.106.2 is the latest safe release, and an earlier compromise potentially affected more than 2,500 organisations and 434,000 CI/CD pipelines.
- LiteLLM 1.107.0 contained credential-stealing malware and a remote access trojan.
- The compromised package and Docker image were removed within hours.
- Users who ran it should investigate systems and rotate exposed secrets.