Search
SlowMist: LiteLLM Hit by Supply Chain Attack Again, Malicious Version Can Steal Cloud Credentials and AI Keys
2 hour ago /
Read about 0 minute
Author：小编
LiteLLM has suffered a supply chain attack, with its malicious version litellm@1.107.0 affecting relevant floating tags of PyPI packages and Docker images. This malware can automatically run when Python starts, stealing sensitive information such as cloud service credentials, AI API keys, SSH private keys, and even enabling remote code execution. Currently, the affected versions have been removed or replaced. Users should avoid using version 1.107.0, rebuild affected environments using clean images, rotate potentially exposed credentials, and pin the version to 1.106.2.
-
C114 Communication Network -
Communication Home
7 X 24 Track global technological trends
