[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 6 sources · 3 days · First seen · Last updated

LiteLLM software supply chain attack

Overview

The LiteLLM open-source project, an AI gateway and Python SDK, was targeted in a sophisticated supply chain attack involving the distribution of malicious software via PyPI and Docker registries. The breach specifically affected version 1.107.0, which contained malware designed to steal credentials, secrets, and environment variables, and facilitate remote code execution across Windows, Linux, and macOS systems.

Initial reports indicated the compromise was facilitated by stolen GitHub CLI OAuth tokens belonging to three engineers, which allowed threat actors to trigger and approve malicious project releases. Subsequent findings revealed the attack was made possible by an unrevoked master key that had been accidentally exposed in a configuration file in May.

Security firm Wiz reported that the compromised package was downloaded approximately 49,000 times. The attack exhibited patterns of ‘LLMjacking,’ with evidence suggesting attackers attempted to use stolen credentials to access Amazon AWS cloud services and AI models shortly after the breach.

Entities

LiteLLM · Python Package Index · GitHub · Nvidia · PyPI

Timeline

  1. [TECHNOLOGY] 2 sources
    LiteLLM suffers supply-chain attack via exposed master key

    A supply-chain attack targeting LiteLLM users via a compromised PyPI package has potentially affected 49,000 downloads, using stolen credentials for ‘LLMjacking’ activities.

  2. [TECHNOLOGY] 5 sources
    LiteLLM supply chain attack compromises AI developer credentials

    A supply chain attack on the LiteLLM Python package version 1.107.0 used stolen GitHub tokens to distribute malware designed to steal developer credentials and secrets.

Sources

blogspan.net · businesstechweekly.com · clickhereshow.com · cybernoz.com · dev.to · thehackernews.com