Technology2 sources
LiteLLM PyPI Package Hacked to Distribute Malware
- Hackers compromised LiteLLM's PyPI package, releasing a malicious version (1.107.0).
- The malicious version contained malware designed to steal cloud and AI credentials.
- PyPI quarantined the trojanized version within hours of its release.
- The malware included a remote access trojan (RAT) capable of executing arbitrary code.
- The attack targeted the LiteLLM project's Docker images.