Source: stepsecurity.io
The litellm 1.107.0 release on PyPI was compromised, with backdoored wheel packages and Docker images shipping a malicious .pth file acting as a credential stealer. The malware also includes an hourly remote code loader that periodically fetches and executes additional payloads. Stolen credentials and data are exfiltrated to the domain litellm.dev. The article provides indicators of compromise (IOCs) and remediation guidance. This represents a serious supply chain attack targeting developers and organizations using the litellm Python package. The attack vector leverages Python's .pth file mechanism to achieve persistence and code execution on affected systems.
