LiteLLM release pipeline compromised to distribute info-stealing malware

The LiteLLM project has confirmed a security compromise affecting its software release pipeline. According to reports, attackers successfully infiltrated the project’s PyPI package repository, using the breach to distribute malicious payloads to unsuspecting users.

The compromised packages and associated malicious Docker images were designed to function as info-stealer malware. When executed, this payload actively scans for and exfiltrates sensitive information from the infected environment, including credentials, security secrets, and environment variables.

This incident underscores the ongoing risks associated with software supply chain security, particularly for open-source projects that serve as critical infrastructure for AI developers. By compromising the release pipeline, attackers can leverage the trust established in legitimate software distributions to deliver malicious code directly into development and production environments.

Users of the LiteLLM project are advised to verify their current installations and monitor for any indicators of unauthorized access to their systems or exposed environment variables. As the investigation into the scope of the compromise continues, developers relying on automated deployment pipelines should remain vigilant against similar supply chain attacks that target software package repositories.

Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/