LiteLLM Supply Chain Attack and Critical Vulnerabilities Expose AI Infrastructure
LiteLLM version 1.107.0 was compromised in a supply chain attack that distributed a credential stealer and a persistent backdoor via stolen GitHub OAuth tokens. The incident exposes cloud credentials, AI provider keys, and sensitive developer secrets across millions of installations.
**If you use LiteLLM (or suspect you use it), this is urgent. Check for installed LiteLLM 1.107.0 or pulled its Docker images (even as "latest") on October 21. If you find any trace of LiteLLM 1.107.0 treat those machines as fully hacked: don't run pip, manually delete cook.pth, cook.py and sitecustomize.py from site-packages, kill the hidden Python process, and rebuild from scratch pinned to version 1.106.2. Then assume all your secrets were stolen and change them, including cloud keys, SSH keys, API keys, tokens and saved passwords, and block litellm.dev on your network.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/litellm-supply-chain-attack-and-critical-vulnerabilities-expose-ai-infrastructure-p-t-8-f-2/gD2P6Ple2L
BeyondMachinesLiteLLM Supply Chain Attack and Critical Vulnerabilities Expose AI InfrastructureLiteLLM version 1.107.0 was compromised in a supply chain attack that distributed a credential stealer and a persistent backdoor via stolen GitHub OAuth tokens. The incident exposes cloud credentials, AI provider keys, and sensitive developer secrets across millions of installations.