OTX Threat: LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
AI Summary
LiteLLM version 1.107.0 was compromised through a supply chain attack affecting both PyPI packages and Docker images. The malicious release contains Python startup files that automatically execute upon Python initialization, stealing cloud credentials, private keys, browser data, and AI development tool authentication. Socket's AI scanner detected the compromise seven minutes after publication. Co Sectors: Technology
Discussion
Sign in to join the discussion.
Loading comments…