CyberReportedHighDevelopingFeatured

LiteLLM release pipeline compromised; malicious PyPI packages and Docker images distribute info-stealer

Attackers breached the LiteLLM project's release pipeline, publishing trojanized PyPI packages and Docker images that exfiltrate credentials, secrets, and environment variables. The compromise affects users who pulled the malicious artifacts, though the full scope and duration of the intrusion remain unclear. This highlights supply-chain risks in the AI/ML tooling ecosystem, where trusted packages can be weaponized to target developer environments.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works

BleepingComputerabout 21 hours agoengCredibility 18%View source

Score Breakdown

Mosaic Score7.0

Model confidence0.7

Significance0.8

Source credibility0.2

Intelligence Tags

#supply-chain #malware #pypi #docker #ai-tools #credential-theft

Entities

Supply Chainconcept

Source

Part of a situation

developingCyber7h ago

LiteLLM Supply Chain Attack via Compromised GitHub OAuth Tokens

The LiteLLM project's release pipeline was compromised via attackers utilizing compromised GitHub CLI OAuth tokens. This enabled the publication of malicious PyPI packages and Docker images designed to exfiltrate credentials, secrets, and environment variables. The full scope of affected users and the duration of the intrusion remain under assessment.

→ stable·↑2 signalsScore 5.0