LiteLLM discloses that attackers push a malicious version of the software through PyPI and Docker registries, aiming to steal credentials and developer information from users who install it. Help Net Security reports the malware is designed to harvest cloud logins, developer secrets and API keys, and says LiteLLM has been compromised before this year.
Across outlets, the incident centers on LiteLLM version 1.107.0 being distributed via Python wheels and Docker images after compromise of the release pipeline. The Hacker News reports LiteLLM suspects threat actors abused multiple independent security controls to push the package to Docker Hub and PyPI, and places the timing of the release compromise around 4:00 a.m. The Hacker News also states the Python package is quarantined on PyPI after reports from multiple security firms that identify a credential stealer and backdoor.
Differences in emphasis include how outlets frame the cause (second incident versus specific pipeline control compromise) and the level of operational detail, such as the specific release version and the cited incident timing, but all describe the same general supply-chain mechanism and malicious payload.
