CERT24LiteLLM release pipeline compromised to distribute info-stealing malwareLoading data…

LiteLLM release pipeline compromised to distribute info-stealing malware

The LiteLLM release pipeline was compromised, and version 1.107.0 and malicious Docker images were published through PyPI and container registries. The payload stole credentials, secrets, and environment variables. All LiteLLM 1.107.0 PyPI wheels were affected on Windows, Linux, and macOS systems.

← Back to intelligence

LiteLLM release pipeline compromised to distribute info-stealing malware

The LiteLLM release pipeline was compromised, and version 1.107.0 and malicious Docker images were published through PyPI and container registries. The payload stole credentials, secrets, and environment variables. All LiteLLM 1.107.0 PyPI wheels were affected on Windows, Linux, and macOS systems.