Act
active
LiteLLM PyPI and Docker images backdoored with credential-stealer
- Engineer — Act: LiteLLM is a widely adopted Python LLM gateway library; compromised PyPI releases and Docker images can steal env vars, API keys, and secrets from any pipeline that installs or pulls them. Audit all CI/CD and container builds for LiteLLM usage, pin or remove affected versions immediately, and rotate any credentials that ran in affected environments.
- SOC/IR — Act: Active supply-chain malware distributing an info-stealer via a popular AI library is an assume-breach scenario for any org using LiteLLM in their stack. Hunt for anomalous outbound connections from build agents and containers, and sweep secrets-management logs for unexpected access since the compromise window.
- Leader — Act: A compromised open-source AI library used heavily in LLM integration work creates real credential-exposure risk across engineering teams. Confirm whether LiteLLM appears in any internal projects, direct teams to audit and remediate this week, and assess whether any cloud or SaaS credentials were potentially stolen.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.