#credential-stealer on Hacker News

3 stories tagged credential-stealer, newest first.

Screenshot of safedep.io: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

supply-chain-attack litellm pypi python

Screenshot of github.com: Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer (github.com)

701 points by theanonymousone 7 months ago | 281 comments

GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.

supply-chain-attack pypi litellm python

Screenshot of github.com: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised (github.com)

888 points by dot_treo 7 months ago | 467 comments

GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.

supply-chain-attack litellm pypi python

#credential-stealer on Hacker News

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer(github.com)

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised(github.com)

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer (github.com)

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised (github.com)