bleeping-computer · Crawled Oct 23, 2026
LiteLLM release pipeline hacked to distribute info-stealer malware
11 IoCs 1 Actors
Read original article ↗
AI Summary
The LiteLLM project's release pipeline was compromised on October 21, 2026, leading to the distribution of malicious PyPI wheels and Docker images for version 1.107.0. The attack injected a Python-based info-stealer into the installation packages, which executed at Python startup via malicious .pth and .py files to harvest cloud credentials, AI provider keys, developer secrets, browser data, and system information. The stolen data was exfiltrated to litellm[.]dev and a GitHub-hosted loader enabled remote code execution. The artifacts were quickly detected and removed, but recovery requires more than uninstalling the package due to persistent payloads.
AI-extracted · verify before operational use
Extracted Entities 1 found
Indicators of Compromise 11 extracted
| Type | Value | Detail |
|---|---|---|
| Package | litellm==1.107.0 | Details → |
| Domain | litellm[.]dev | Details → |
| GitHub Repo | berriai/litellm | Details → |
| GitHub Repo | berriai/litellm-database | Details → |
| GitHub Repo | berriai/litellm-non_root | Details → |
| SHA-256 | 1bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339e | Details → |
| SHA-256 | c00f9d92c427c00f9d92c427c00f9d92c427c00f9d92c427c00f9d92c427 | Details → |
| SHA-256 | 7b00e91cd2fec7b00e91cd2fec7b00e91cd2fec7b00e91cd2fec7b00e91cd2fe | Details → |
| Filename | cook.pth | Details → |
| Filename | cook.py | Details → |
| Filename | sitecustomize.py | Details → |
MITRE ATT&CK TTPs 24 techniques
T1005 Data from Local System · Collection T1021 Remote Services · Lateral Movement T1036.005 Match Legitimate Name or Location · Defense Evasion T1053.005 Scheduled Task · Execution T1055 Process Injection · Defense Evasion T1059.001 PowerShell · Execution T1059.004 Unix Shell · Execution T1070.004 File Deletion · Defense Evasion T1071 Application Layer Protocol · Command And Control T1071.001 Web Protocols · Command And Control T1078 Valid Accounts · Defense Evasion T1078.004 Cloud Accounts · Defense Evasion T1081 T1081 T1090 Proxy · Command And Control T1098 Account Manipulation · Persistence T1133 External Remote Services · Persistence T1195 Supply Chain Compromise · Initial Access T1195.001 Compromise Software Dependencies and Development Tools · Initial Access T1485 Data Destruction · Impact T1548.001 Setuid and Setgid · Privilege Escalation T1553 Subvert Trust Controls · Defense Evasion T1555 Credentials from Password Stores · Credential Access T1555.003 Credentials from Web Browsers · Credential Access T1566 Phishing · Initial Access