It is a loading screen for the bad guys.
Rotate any API credentials exposed on systems running LiteLLM, audit your installations, and watch for suspicious outbound traffic. Operator action required; the update button is not your friend today.
Reward: You've received a Cursed Dependency — soulbound, untradeable, already installed.
#SupplyChainAttack #Malware (2/2)
CSO OnlineLiteLLM release pipeline hacked to distribute credential-stealing malwareAttackers used stolen GitHub credentials to push a backdoored version of the popular AI gateway, exposing cloud, Kubernetes, and CI/CD secrets.