Malicious LiteLLM Versions Compromise Developer Environments
- On March 24, two malicious versions of LiteLLM (1.82.7 and 1.82.8) were published on PyPI, with over 46,996 downloads in just 46 minutes.
- Version 1.82.8 executed its payload without any import due to a .pth file planted in the Python installation.
- The malware specifically targeted cryptocurrency-related files, including Bitcoin wallet files and Solana validator keys.
- Approximately 88% of the 2,337 PyPI packages depending on LiteLLM allowed the compromised versions at the time of the attack.
- PyPI quarantined both malicious versions by around 11:25 UTC, shortly after their release.
The incident highlights vulnerabilities in developer environments where tools like LiteLLM are widely used, with potential for significant credential exposure across various platforms.
Following this incident, teams that installed or upgraded LiteLLM on March 24 should consider their environments compromised and take immediate action to secure sensitive data.(Source)
