🤖 LiteLLM (LLM proxy library): release pipeline compromised. Malicious PyPI package and Docker images published, shipping an info-stealer that harvests credentials, API keys and env vars from deployments.
If you ran an affected release, rotate every secret it could reach.
🔗 https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/
#CyberSec #SupplyChain #InfoSec #Malware
BleepingComputerLiteLLM release pipeline hacked to distribute info-stealer malwareHackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.