LiteLLM Release Pipeline Compromised, Malware Distributed

LiteLLM’s release pipeline was compromised on October 21, allowing attackers to publish a malicious version of its Python package and Docker images that could steal credentials and run additional code. LiteLLM says version 1.107.0 was affected; version 1.106.2 is the latest clean release it has identified. The package was distributed through PyPI and Docker. Python startup files installed with the malicious release could run when Python launched, potentially exposing credentials and secrets even if an affected application did not otherwise use LiteLLM. Researchers said the malware targeted information including cloud credentials, developer keys, browser data and AI-service API keys, then encrypted and sent collected data to a LiteLLM-related domain. The packages were available for a limited period before being removed or replaced with clean artifacts. One report estimated more than 49,000 downloads, but that figure does not establish how many installations were infected. LiteLLM said enterprise customers using its private repository were not affected. Researchers at Wiz reported seeing stolen AWS credentials tested about four and a half hours after data was exfiltrated. They...