Techly NewsGet the app

Get the latest tech news

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor


LiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of backdoor

backdoor

Photo of credential stealer

credential stealer

Photo of pypi installs

pypi installs

Related news:

News photo

Apple tells Home Office to admit to secret iPhone ‘backdoor’ demand

News photo

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens - Research shows tens of millions of people are being forced to use platform that amounts to ‘backdoor’ on their device

News photo

Show HN: We hid a backdoor in an LLM – $51,200 on finding it

« Ballistic strike in Kyiv, Ukraine, leaves Datagroup data center inoperable
SpaceX, Tesla Boards Study Possible $3.5 Trillion Merger »