RealFeedApp SSH keys and AI tokens stolen via LiteLLM 1.107.0
The LiteLLM 1.107.0 release on PyPI includes three files that steal credentials and execute remote code, running on any Python process startup. PyPI has since removed the release, while versions 1.106.2 and 1.107.0rc1/2 remain clean.
- Field
- computer security
- What they did
- The LiteLLM 1.107.0 release on PyPI was compromised with malware that steals credentials and executes remote code. These files are installed on all platforms (Linux, macOS, Windows) and activate whenever any Python process starts on the host, even if the user does not import the LiteLLM library.
- Why it matters
- This creates a critical security threat, allowing attackers to gain access to SSH keys, CI/CD secrets, AI provider tokens, and browser passwords stored on the system.
#litellm#security#backdoor#credential stealer#pypi#llm
