Malicious releases of the LiteLLM library, which has 95 million downloads per month, have been posted on PyPI.
Developers of the Python library LiteLLM, which has 95 million downloads per month and 3.5 million in the last 24 hours, reported a compromise of the project. Attackers were able to intercept the maintainer's credentials and published two malicious releases on PyPI — versions 1.82.7 and 1.82.8, containing code to steal keys and passwords from users' systems. Currently, the malicious versions have been removed from PyPI, and […]
