Byla zaznamen\u00e1na publikace \u0161kodliv\u00e9ho vyd\u00e1n\u00ed knihovny LiteLLM v repozit\u00e1\u0159i PyPI, kter\u00e1 m\u00e1 23 milion\u016f sta\u017een\u00ed t\u00fddn\u011b, a tak\u00e9 vlo\u017een\u00ed \u0161kodliv\u00e9ho k\u00f3du do ofici\u00e1ln\u00edho Docker obrazu projektu. Jedn\u00e1 se o ji\u017e druh\u00fd takov\u00fd incident s LiteLLM \u2014 v b\u0159eznu tohoto roku \u00fato\u010dn\u00edci ji\u017e publikovali \u0161kodliv\u00e1 vyd\u00e1n\u00ed po zachycen\u00ed p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f spr\u00e1vce. Tentokr\u00e1t \u00fato\u010dn\u00edci um\u00edstili verzi LiteLLM 1.107.0, do kter\u00e9 byl vlo\u017een \u0161kodliv\u00fd k\u00f3d pro vzd\u00e1len\u00e9 prov\u00e1d\u011bn\u00ed p\u0159\u00edkaz\u016f, stejn\u011b jako pro vyhled\u00e1v\u00e1n\u00ed a odes\u00edl\u00e1n\u00ed p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f, kl\u00ed\u010d\u016f a p\u0159\u00edstupov\u00fdch token\u016f.<\/p>\n
\u0160kodliv\u00fd k\u00f3d byl podstr\u010den b\u011bhem f\u00e1ze sestaven\u00ed bez kompromitace git-repozit\u00e1\u0159e. Po instalaci se \u0161kodliv\u00fd k\u00f3d aktivuje p\u0159ed importem LiteLLM prost\u0159ednictv\u00edm instalace soubor\u016f cook.pth, cook.py a sitecustomize.py do adres\u00e1\u0159e s knihovnami Python. Tyto soubory se spou\u0161t\u011bj\u00ed p\u0159i ka\u017ed\u00e9m proveden\u00ed Pythonu v syst\u00e9mu, ani\u017e by musel u\u017eivatel prov\u00e9st jak\u00e9koliv akce. <\/p>\n
Nejprve Python spou\u0161t\u00ed soubor cook.pth, kter\u00fd obsahuje pouze jeden \u0159\u00e1dek \u201eimport cook\u201c pro import skriptu cook.py, kter\u00fd sb\u00edr\u00e1 p\u0159ihla\u0161ovac\u00ed \u00fadaje. D\u00e1le se importuje skript sitecustomize.py, kter\u00fd se pou\u017e\u00edv\u00e1 pro pozad\u00ed na\u010d\u00edt\u00e1n\u00ed extern\u00edho k\u00f3du (parametry na\u010d\u00edt\u00e1n\u00ed jsou ur\u010dov\u00e1ny odkazem \u201eraw.githubusercontent.com\/letters9813\/pythonclient-test\/main\/domain.txt\u201c). \u0160kodliv\u00fd k\u00f3d v obou skriptech je zkomprimov\u00e1n pomoc\u00ed zlib a zak\u00f3dov\u00e1n metodou Base64. Indik\u00e1torem kompromitace m\u016f\u017ee b\u00fdt pojmenov\u00e1n\u00ed soubor\u016f v syst\u00e9mu \u201e\/tmp\/.pc_once_*\u201c a \u201e\/tmp\/remote_code_loader.lock\u201c.<\/p>\n
Po aktivaci skript cook.py prov\u00e1d\u00ed skenov\u00e1n\u00ed parametr\u016f p\u0159ipojen\u00ed k cloudov\u00fdm slu\u017eb\u00e1m, repozit\u00e1\u0159\u016fm a syst\u00e9m\u016fm kontinu\u00e1ln\u00ed integrace (AWS, Azure, Google Cloud, Kubernetes, Docker, GitHub CLI, Vault, Terraform, Packer), p\u0159ihla\u0161ovac\u00edch \u00fa\u010dt\u016f v\u00fdvoj\u00e1\u0159\u016f, parametr\u016f p\u0159ipojen\u00ed k Git, nastaven\u00ed npm a PyPI, soubor\u016f s prom\u011bnn\u00fdmi prost\u0159ed\u00ed, soukrom\u00fdch kl\u00ed\u010d\u016f pro SSH, PGP a TLS, nastaven\u00ed AI n\u00e1stroj\u016f, datab\u00e1z\u00ed prohl\u00ed\u017ee\u010d\u016f s cookies, ulo\u017een\u00fdmi daty a histori\u00ed, informacemi o procesech a prom\u011bnn\u00fdmi prost\u0159ed\u00ed. Zji\u0161t\u011bn\u00e1 data jsou \u0161ifrov\u00e1na pomoc\u00ed algoritm\u016f AES-256-CBC + RSA-4096 a odes\u00edl\u00e1na v podob\u011b ov\u011b\u0159ovac\u00edho dotazu na web litellm.dev, vytvo\u0159en\u00fd \u00fato\u010dn\u00edky. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LiteLLM, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 23 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Docker-\u043e\u0431\u0440\u0430\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 LiteLLM — \u0432 \u043c\u0430\u0440\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u044e LiteLLM 1.107.0, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183962","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Do PyPI bal\u00ed\u010dku a Docker obrazu s LiteLLM bylo vlo\u017eeno \u0161kodliv\u00e9 software | ProHoster","description":"Byla zaznamen\u00e1na publikace v repozit\u00e1\u0159i PyPI \u0161kodliv\u00e9 verze knihovny LiteLLM, kter\u00e1 m\u00e1 23 milion\u016f sta\u017een\u00ed t\u00fddn\u011b, a tak\u00e9 vlo\u017een\u00ed \u0161kodliv\u00e9ho k\u00f3du do ofici\u00e1ln\u00edho Docker obrazu projektu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/malware-injected-into-litellm-pypi-package-and-docker-image","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 PyPI-\u043f\u0430\u043a\u0435\u0442 \u0438 Docker-\u043e\u0431\u0440\u0430\u0437 \u0441 LiteLLM \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LiteLLM, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 23 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Docker-\u043e\u0431\u0440\u0430\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/malware-injected-into-litellm-pypi-package-and-docker-image","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:40+00:00","article:modified_time":"2026-10-22T15:40:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=183962"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183962\/revisions"}],"predecessor-version":[{"id":183963,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183962\/revisions\/183963"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=183962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=183962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=183962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"