Unverified
Gathered automatically from the outlets below; our newsroom hasn't checked it yet.
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket…
What's new
- Our desk updated its story
- safedep.io and BerriAI/litellm GitHub issue #47826 are now reporting this
- New headline Was: “LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor”
- Our desk filed its story
- The Hacker News is now reporting this
1 earlier update
- New headline Was: “Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor”
How it’s being reported
2 sourcesCompromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Leads with a figure in the headline.
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Gives this outlet’s account of the story.
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket…