Huo Xing Finance reports, according to SlowMist, LiteLLM has again been targeted by a supply chain attack. The malicious version litellm@1.107.0 has compromised PyPI packages and Docker images, including floating tags such as latest and main-stable. The injected malicious code automatically executes upon Python startup, stealing sensitive data such as cloud credentials, AI API keys, and SSH private keys, and supports remote code execution. The affected versions have been removed or replaced. SlowMist advises users to avoid using version 1.107.0, rebuild affected environments from clean images, rotate any potentially exposed credentials, and pin versions to 1.106.2.
LiteLLM Hit by Supply Chain Attack: Malicious Version 1.107.0 Steals Credentials and Keys
MarsBitShare
Summary
LiteLLM suffered a supply chain attack through the malicious version litellm@1.107.0, affecting PyPI packages and Docker images. The code automatically steals cloud credentials, AI API keys, and SSH private keys, enabling remote code execution. The compromised version has been removed. SlowMist recommends avoiding version 1.107.0, rebuilding from clean images, and rotating credentials. This incident underscores the importance of on-chain news and AI + crypto updates for developers and users.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.