A PyPI repository has been found to have a malicious release of the LiteLLM library, which has 23 million downloads per week, as well as the injection of malicious code into the official Docker image of the project. This is not the first such incident with LiteLLM \u2014 in March this year, attackers had already published malicious releases after intercepting the maintainer's credentials. This time, the attackers posted version LiteLLM 1.107.0, which contained embedded malicious code for remote command execution, as well as for searching and sending credentials, keys, and access tokens.<\/p>\n
A rosszindulat\u00fa k\u00f3d a build folyamat sor\u00e1n ker\u00fclt beilleszt\u00e9sre an\u00e9lk\u00fcl, hogy a git-t\u00e1rol\u00f3t kompromitt\u00e1lt\u00e1k volna. A telep\u00edt\u00e9st k\u00f6vet\u0151en a rosszindulat\u00fa k\u00f3d az LiteLLM import\u00e1l\u00e1sa el\u0151tt aktiv\u00e1l\u00f3dik a cook.pth, cook.py \u00e9s sitecustomize.py f\u00e1jlok Python k\u00f6nyvt\u00e1rba t\u00f6rt\u00e9n\u0151 telep\u00edt\u00e9se r\u00e9v\u00e9n. Ezek a f\u00e1jlok minden egyes Python futtat\u00e1skor v\u00e9grehajt\u00f3dnak a rendszerben, an\u00e9lk\u00fcl, hogy a felhaszn\u00e1l\u00f3nak b\u00e1rmilyen l\u00e9p\u00e9st kellene tennie. <\/p>\n
Initially, Python runs the file cook.pth, which contains only one line 'import cook' to import the script cook.py that collects credentials. Then the script sitecustomize.py is imported, used for the background loading of external code (the loading parameters are defined by the link 'raw.githubusercontent.com\/letters9813\/pythonclient-test\/main\/domain.txt'). The malicious code in both scripts is compressed using zlib and encoded with Base64. An indicator of compromise may be the appearance of files in the system '\/tmp\/.pc_once_*' and '\/tmp\/remote_code_loader.lock'.<\/p>\n
Az aktiv\u00e1l\u00e1s ut\u00e1n a cook.py f\u00e1jl a felh\u0151szolg\u00e1ltat\u00e1sokkal, adatt\u00e1rakkal \u00e9s folyamatos integr\u00e1ci\u00f3s rendszerekkel (AWS, Azure, Google Cloud, Kubernetes, Docker, GitHub CLI, Vault, Terraform, Packer), fejleszt\u0151i fi\u00f3kokkal, Git csatlakoz\u00e1si param\u00e9terekkel, npm \u00e9s PyPI be\u00e1ll\u00edt\u00e1sokkal, k\u00f6rnyezeti v\u00e1ltoz\u00f3knak megfelel\u0151 f\u00e1jlokkal, SSH, PGP \u00e9s TLS z\u00e1rt kulcsaival, AI eszk\u00f6z\u00f6k be\u00e1ll\u00edt\u00e1saival, b\u00f6ng\u00e9sz\u0151i adatb\u00e1zisokkal, Cookie-kkal, t\u00e1rolt adatokkal \u00e9s t\u00f6rt\u00e9nettel, valamint folyamatokkal \u00e9s k\u00f6rnyezeti v\u00e1ltoz\u00f3kkal foglalkozik. A felfedezett adatokat AES-256-CBC + RSA-4096 algoritmusokkal titkos\u00edtj\u00e1k, \u00e9s ellen\u0151rz\u0151 k\u00e9r\u00e9s form\u00e1j\u00e1ban k\u00fcldik el a litellm.dev oldalra, amelyet a t\u00e1mad\u00f3k hoztak l\u00e9tre. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LiteLLM, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 23 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Docker-\u043e\u0431\u0440\u0430\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 LiteLLM — \u0432 \u043c\u0430\u0440\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u044e LiteLLM 1.107.0, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183962","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rosszindulat\u00fa szoftver ker\u00fclt a PyPI csomagba \u00e9s a LiteLLM Docker-k\u00e9pbe | ProHoster","description":"A rosszindulat\u00fa LiteLLM k\u00f6nyvt\u00e1rnak a PyPI t\u00e1rol\u00f3ban val\u00f3 k\u00f6zz\u00e9t\u00e9tele r\u00f6gz\u00edtve lett, amely hetente 23 milli\u00f3 let\u00f6lt\u00e9ssel rendelkezik, valamint rosszindulat\u00fa k\u00f3d behelyez\u00e9se a projekt hivatalos Docker-k\u00e9p\u00e9be.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/malware-injected-into-litellm-pypi-package-and-docker-image","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 PyPI-\u043f\u0430\u043a\u0435\u0442 \u0438 Docker-\u043e\u0431\u0440\u0430\u0437 \u0441 LiteLLM \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LiteLLM, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 23 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Docker-\u043e\u0431\u0440\u0430\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/malware-injected-into-litellm-pypi-package-and-docker-image","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:40+00:00","article:modified_time":"2026-10-22T15:40:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=183962"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183962\/revisions"}],"predecessor-version":[{"id":183963,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183962\/revisions\/183963"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=183962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=183962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=183962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"