Technology2 sources

LiteLLM PyPI Package Hacked to Distribute Malware

  • Hackers compromised LiteLLM's PyPI package, releasing a malicious version (1.107.0).
  • The malicious version contained malware designed to steal cloud and AI credentials.
  • PyPI quarantined the trojanized version within hours of its release.
  • The malware included a remote access trojan (RAT) capable of executing arbitrary code.
  • The attack targeted the LiteLLM project's Docker images.
LiteLLM PyPI Package Hacked to Distribute Malware | Split Angle