LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images designed to steal credentials and environment variables.
According to BleepingComputer, the release pipeline of the LiteLLM project was successfully breached by hackers, resulting in the distribution of malicious code through the project's official channels. The attackers compromised the PyPI package and published malicious Docker images containing a payload designed to harvest sensitive data.
The malicious payload specifically targets credentials, secret keys, and environment variables on compromised systems. The exposure of such critical information poses an immediate security risk, potentially allowing unauthorized access to systems and services managed by affected developers and organizations.
Project maintainers and security researchers have been working to address the compromise, remove the malicious artifacts, and assess the full scale of the impact. Users who recently pulled the affected packages or images are urged to audit their environments for unauthorized access.
This security breach highlights the ongoing supply chain risks associated with open-source software and AI tooling. For developers and tech companies in Uzbekistan and the broader region, it serves as a critical reminder to carefully verify third-party dependencies and monitor software supply chains closely.
