Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #4
Compromised LiteLLM 1.107.0 on PyPI Found to Steal Credentials
Original: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor Article URL: https:// safedep.io/litellm-
Security researchers at SafeDep report that version 1.107.0 of LiteLLM published to the Python Package Index was compromised and installed a credential stealer and backdoor on systems using it. Developers who pulled the package during the affected window are being urged to check their environments, rotate exposed API keys and secrets, and pin to a clean version.
Why now: A widely used open-source LLM proxy library distributing malware is an urgent supply-chain risk for anyone running it in production.
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/3160616