LiteLLM release pipeline hacked to distribute info-stealer malware
Attackers compromised the LiteLLM project on PyPI and used it to distribute malicious Docker images containing a credential-stealing payload. The malware targets sensitive data including API keys, secrets, and environment variables. This represents a supply-chain attack vector against developers using the LiteLLM package.
Key points
- LiteLLM PyPI package and Docker images were compromised
- Malware designed to steal credentials and environment variables
- Supply-chain attack affecting developers who use the package
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
