LiteLLM Compromised, Steals Credentials
MentionsDocker
In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a credential stealer targeting browser, cloud and AI secrets as well as a dormant C2 capability.
Summary from Wiz Blog.
Explained
The technology and terms in this story. Learn more
- TechnologyPyPI · Python Package IndexThe package registry for Python libraries.
- AttackInfostealerMalware that grabs saved passwords, browser cookies and crypto wallets from an infected computer.
- ConceptCommand and control · C2The servers attackers use to send instructions to their malware and receive stolen data.
Related coverage
Other sources covering the same vulnerabilities or event.