Threat intel
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package was compromised in a software supply chain attack that delivered a credential stealer and a backdoor through version 1.107.0, distributed via PyPI wheels and Docker images, The Hacker News reported, citing SafeDep, Socket, StepSecurity, and Upwind. The package has since been quarantined on PyPI.
The popular LiteLLM Python package has been compromised in a software supply chain attack that delivered a credential stealer and a backdoor to users' systems, according to The Hacker News, citing findings from security firms SafeDep, Socket, StepSecurity, and Upwind.
The compromise affects LiteLLM version 1.107.0. The tampered release was distributed through wheels published on the Python Package Index (PyPI) as well as through Docker images, meaning both developers installing the package via Python tooling and teams pulling container images may have been exposed.
According to the reports, the malicious code planted in the compromised release was designed to steal credentials from affected environments and to install a backdoor, potentially giving attackers persistent access to systems where the package was installed or deployed.
Following the disclosure, the package was quarantined on PyPI, blocking further downloads of the compromised release from the official index. The supplied item does not detail the status of the affected Docker images, how the compromise was carried out, or how many users may have downloaded the malicious release.
Security teams that installed or deployed LiteLLM 1.107.0 should treat any credentials present in those environments as potentially compromised. Standard response steps include rotating exposed secrets, auditing systems for signs of unauthorized access, and removing or replacing the affected version.
Details of the incident come from The Hacker News and the cited security researchers at SafeDep, Socket, StepSecurity, and Upwind.
Source: The Hacker News
