#litellm on Hacker News

5 stories tagged litellm, newest first.

Screenshot of safedep.io: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

582 points by abhisek 5 days ago | 192 comments

SafeDep analysis of the compromised LiteLLM 1.107.0 PyPI release, which installed a credential stealer and remote-code backdoor via .pth and sitecustomize files, with IOCs.

supply-chain-attack litellm pypi python

Launch HN: Respan (YC W24) – Open-source Rust AI gateway built around plugins

45 points by Andydy25 6 days ago | 21 comments

Launch HN post introducing Respan, an open-source Rust AI/LLM gateway with a small core where providers, protocols, and features are plugins.

llm-gateway rust respan litellm

Screenshot of futuresearch.ai: My minute-by-minute response to the LiteLLM malware attack

My minute-by-minute response to the LiteLLM malware attack (futuresearch.ai)

415 points by Fibonar 7 months ago | 153 comments

A FutureSearch engineer's blog post with the Claude Code transcript of discovering the compromised LiteLLM PyPI release and getting it quarantined.

supply-chain-attack litellm pypi malware

Screenshot of github.com: Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer (github.com)

701 points by theanonymousone 7 months ago | 281 comments

GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.

supply-chain-attack pypi litellm python

Screenshot of github.com: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised (github.com)

888 points by dot_treo 7 months ago | 467 comments

GitHub issue in the BerriAI/litellm repo reporting a malicious litellm_init.pth in PyPI release 1.82.8 that acts as a credential stealer.

supply-chain-attack litellm pypi python

#litellm on Hacker News

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor(safedep.io)

Launch HN: Respan (YC W24) – Open-source Rust AI gateway built around plugins

My minute-by-minute response to the LiteLLM malware attack(futuresearch.ai)

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer(github.com)

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised(github.com)

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor (safedep.io)

My minute-by-minute response to the LiteLLM malware attack (futuresearch.ai)

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer (github.com)

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised (github.com)