#litellm
-
A Leaked LiteLLM Master Key Turned Into a Poisoned Python Release
A master key accidentally published in May was never actually revoked — and in October an attacker used it to hijack LiteLLM's release pipeline and push a malicious version of the package.
-
Compromised LiteLLM 1.107.0 on PyPI shipped a credential stealer and backdoor
Version 1.107.0 of the popular LLM gateway LiteLLM, uploaded to PyPI, carried a credential stealer and a remote-code-execution backdoor. The GitHub source was clean, yet the malicious files ran on every Python process start on the host.
-
Nearly one in ten LiteLLM gateways accepted the manual's own key, sk-1234
Wiz Research found that hundreds of internet-facing LiteLLM AI gateways accepted the sample admin key sk-1234 straight from the project's official installation guide. Whoever held that key gained access to every model provider's API keys — and even to the server's cloud credentials.
-
Terabytes of Credentials Leaked: A Supply-Chain Attack via LiteLLM
The compromise of LiteLLM, a popular AI-development tool, led to the theft of secrets from more than 2,500 organizations, among them Microsoft, Amazon, Cisco, Samsung and Salesforce.
-
Malicious LiteLLM Builds May Have Affected More Than 2,100 Organizations
Two poisoned versions of the AI gateway LiteLLM spent about 40 minutes on PyPI, but managed to harvest cloud keys, SSH keys and Kubernetes tokens. The incident is part of the TeamPCP attack chain tied to the compromise of the Trivy scanner.