Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
AI summary
Editorial policyLiteLLM 1.107.0 on PyPI contains a .pth credential stealer and a sitecustomize.py backdoor that execute on every Python start, detailing the intrusion and indicators of compromise.
Key points
- •LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor.
- •The malicious code runs every time Python is started.
- •The article explains how the implant was introduced, what data is stolen, and provides indicators of compromise.