LiteLLM

Fixes have been released for critical security issues including PHP2Shell, a CVSS 10 GitLab bug, and a backdoored LiteLLM, prompting users to identify affected resources.

• •Fixes are available for PHP2Shell, a Node.js RCE, a CVSS 10 GitLab bug, a backdoored LiteLLM, and a CA key issue.
• •Patches for these vulnerabilities have been released.
• •The article challenges readers to find every affected resource.

Cybersecurity teams face significant challenges this week due to AI-discovered PHP vulnerabilities and flaws in Node.js and the popular AI tool LiteLLM.

• •Vulnerabilities in PHP have been discovered by AI.
• •Flaws have been identified in Node.js and the popular AI tool LiteLLM.
• •These issues are causing cybersecurity teams to be busy with responses this week.

LiteLLM 1.107.0 on PyPI contains a .pth credential stealer and a sitecustomize.py backdoor that execute on every Python start, detailing the intrusion and indicators of compromise.

• •LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor.
• •The malicious code runs every time Python is started.
• •The article explains how the implant was introduced, what data is stolen, and provides indicators of compromise.

LiteLLMの軽量版であるLitelmが紹介され、不要な機能を削ぎ落としたことでセットアップが簡素化され、開発環境での導入障壁が下がりやすくなっている

• •LiteLLMの機能のうち、コアとなるAPIプロキシ機能に特化した軽量な実装となっている
• •依存関係が最小限に抑えられ、Dockerイメージのサイズや初期化時間が従来版より短縮されている
• •大規模な統合機能よりも、シンプルで高速なLLM呼び出しに重点を置いた設計思想が採用されている