SlowMist has detected that LiteLLM has again been targeted by a supply chain attack. The malicious version, litellm@1.107.0, affects both the PyPI package and Docker images, including floating tags such as latest and main-stable. This malicious code automatically executes upon Python startup, stealing sensitive data such as cloud service credentials, AI API keys, and SSH private keys, and enabling remote code execution.
The affected versions have been removed or replaced. SlowMist recommends that users avoid using version 1.107.0, rebuild affected environments using clean images, rotate any potentially exposed credentials, and pin the version to 1.106.2.
SlowMist Reports Supply Chain Attack on LiteLLM via Malicious Version 1.107.0
TechFlowShare
Summary
On-chain news: SlowMist reports a supply chain attack on LiteLLM via the malicious version litellm@1.107.0. The compromised version affects PyPI packages and Docker images, including floating tags such as latest and main-stable. Malicious code executes on Python startup, stealing cloud credentials, AI API keys, and SSH private keys. The version has been removed. Users are advised to avoid version 1.107.0, rebuild using clean images, rotate credentials, and pin to version 1.106.2. AI + crypto news highlights the risks associated with third-party dependencies.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.