Source: stepsecurity.io
The litellm 1.107.0 package on PyPI was compromised with malicious code embedded in its wheels and Docker images. The attack introduced a .pth file-based credential stealer that activates on Python startup. An hourly remote code loader was also included, periodically fetching and executing code from litellm.dev. The malware exfiltrates credentials and sensitive data to an attacker-controlled domain. This is a supply chain attack targeting AI/LLM developers using the popular litellm library. The article provides indicators of compromise (IOCs) and remediation guidance for affected users.
