LiteLLM Compromised in Fresh Supply Chain Attack
LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and Docker.
The incident occurred on October 21 and involved version 1.107.0 of the popular open source proxy for routing requests across LLM providers.
The malicious packages were online for roughly three hours and are estimated to have been downloaded over 49,000 times. The packages were removed from PyPI, and Docker Hub tags and image variants were either removed or repointed to clean artifacts.
[Read: Trivy, Not LiteLLM Behind the 2,500 Org Compromise]
Per LiteLLM’s investigation, the attackers obtained the GitHub CLI OAuth tokens for “an unexpected, innocuously named user account in our internal LiteLLM deployment, which was exposed to the public internet”.
The tokens were likely leaked by Claude Code, which, in specific circumstances, would embed them into a response body, which may be logged to LiteLLM...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
