Skip to content
securitytabs

Covered by 2 outlets — first reported by Socket Blog, Oct 21, 13:41 UTC

LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials

MentionsDocker

In brief

LiteLLM 1.107.0 delivers a credential stealer through Python startup hooks, while container build provenance points to a lookalike source repository used by the project’s release workflow. LiteLLM version 1.107.0 contains malicious Python startup files that collect cloud credentials, private keys, browser data, and authentication files for AI development tools.

From Socket Blog's coverage.

Continue reading

2 outlets, in the order they reported it.

  1. Socket BlogFirst report

    LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials

    LiteLLM 1.107.0 delivers a credential stealer through Python startup hooks, while container build provenance points to a lookalike source repository used by the project’s release workflow.

    Read at Socket Blog Details

  2. Wiz Blog

    LiteLLM Compromised, Steals Credentials

    In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2…

    Read at Wiz Blog Details

Explained

The technology and terms in this story. Learn more