LiteLLM's 1.107.0 PyPI release compromised with infostealer and RAT malware
Multiple security outlets, including CyberSecurityNews, OX Security, and BleepingComputer, report that the LiteLLM 1.107.0 PyPI release was compromised. Hackers reportedly injected an infostealer and a Remote Access Trojan (RAT) into the software, affecting users who downloaded this specific version. BleepingComputer further specifies that the LiteLLM release pipeline itself was hacked to facilitate the malware distribution.
3 articles from 3 outlets covered this story. The underlying claim is sourced from a shipped.
What do all outlets agree on?
3 outlets covered “LiteLLM's 1.107.0 PyPI release compromised with infostealer and RAT malware”. All of them report the following:
- LiteLLM software was compromised
- Version 1.107.0 was affected
- Malware was distributed via PyPI release
- Malware included an infostealer
- Malware included a Remote Access Trojan (RAT)
Which outlets covered this?
All 3 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.