LiteLLM Suffers Supply Chain Attack, Malicious Version 1.107.0 Steals Sensitive Data

LiteLLM has once again fallen victim to a supply chain attack, with the malicious version litellm@1.107.0 affecting PyPI packages and Docker images, including tags such as latest and main-stable. The injected malware executes automatically upon Python startup, stealing sensitive data such as cloud credentials, AI API keys, and SSH private keys, and supports remote code execution. Users are advised to avoid using version 1.107.0, and it is recommended to rebuild the environment from a clean image and rotate any potentially compromised credentials, while sticking to version 1.106.2.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.