LiteLLM Engineer GitHub Credentials Stolen, Backdoor Injected into Release Pipeline
Open-source AI tool LiteLLM suffered a supply chain attack after attackers used stolen GitHub credentials to alter release workflows, injecting malware into version 1.107.0 on PyPI and Docker. Contaminated builds have been removed.
Open-source AI tool LiteLLM suffered a supply chain attack. Attackers obtained credentials for three engineers, disabled protections, and pointed release pipelines to a counterfeit repo, publishing version 1.107.0 with a backdoor. SafeDep reported the malicious package steals cloud credentials, AI keys, and private keys. LiteLLM removed affected builds, stated enterprise users were unaffected, and advised rotating keys.
Key takeaways
- Attackers used stolen engineer credentials to alter LiteLLM's build pipeline, publishing malicious 1.107.0 packages across PyPI and Docker Hub to harvest AI and cloud keys.
- Contaminated releases were removed; LiteLLM advised affected users to reinstall version 1.106.2 in clean environments and rotate potentially exposed keys.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.