Ir re\u0123istr\u0113ta \u013caunpr\u0101t\u012bgas LiteLLM bibliot\u0113kas versijas public\u0113\u0161ana PyPI repozitorij\u0101, kas sa\u0146em 23 miljonus lejupiel\u0101\u017eu ned\u0113\u013c\u0101, k\u0101 ar\u012b \u013caunpr\u0101t\u012bga koda ievieto\u0161ana projekta ofici\u0101laj\u0101 Docker att\u0113l\u0101. Tas nav pirmais \u0161\u0101da veida incidents ar LiteLLM \u2014 \u0161\u012b gada mart\u0101 uzbruc\u0113ji jau public\u0113ja \u013caunpr\u0101t\u012bgas versijas p\u0113c programmat\u016bras uztur\u0113t\u0101ja pieteik\u0161an\u0101s datu nozag\u0161anas. \u0160oreiz uzbruc\u0113ji public\u0113ja LiteLLM 1.107.0 versiju, kur\u0101 bija ieb\u016bv\u0113ts \u013caunpr\u0101t\u012bgs kods, lai veiktu att\u0101lin\u0101tas komandu izpildes, k\u0101 ar\u012b mekl\u0113tu un s\u016bt\u012btu autentifik\u0101cijas datus, atsl\u0113gas un piek\u013cuves tokenus.<\/p>\n
\u013baunpr\u0101t\u012bgais kods tika iek\u013cauts b\u016bv\u0113\u0161anas posm\u0101, neizsast\u0101vot git repozitoriju. P\u0113c instal\u0101cijas \u013caunpr\u0101t\u012bgais kods aktiviz\u0113jas pirms LiteLLM importa, ierakstot failus cook.pth, cook.py un sitecustomize.py Python bibliot\u0113ku direktorij\u0101. \u0160ie faili tiek izpild\u012bti katru reizi, kad tiek palaists Python sist\u0113m\u0101, lietot\u0101jam neveicot nek\u0101das darb\u012bbas. <\/p>\n
Vispirms Python palaid\u012bs failu cook.pth, kur\u0101 ir tikai viena rinda \u201eimport cook\u201d, kas import\u0113 cook.py skriptu, kas v\u0101c autentifik\u0101cijas datus. P\u0113c tam tiek import\u0113ts skripts sitecustomize.py, kas tiek izmantots, lai fon\u0101 iel\u0101d\u0113tu \u0101r\u0113ju kodu (iel\u0101des parametru nosaka saite \u201eraw.githubusercontent.com\/letters9813\/pythonclient-test\/main\/domain.txt\u201d). \u013baunpr\u0101t\u012bgais kods abos skriptos ir saspiests, izmantojot zlib, un kod\u0113ts ar Base64 metodi. Vairogu kompromit\u0101cijai var kalpot failu par\u0101d\u012b\u0161an\u0101s sist\u0113m\u0101 \u201e\/tmp\/.pc_once_*\u201d un \u201e\/tmp\/remote_code_loader.lock.\u201d<\/p>\n
P\u0113c aktiviz\u0113\u0161anas fails cook.py veic sken\u0113\u0161anu attiec\u012bb\u0101 uz savienojuma parametriem ar m\u0101ko\u0146pakalpojumiem, repozitorijiem un nep\u0101rtrauktas integr\u0101cijas sist\u0113m\u0101m (AWS, Azure, Google Cloud, Kubernetes, Docker, GitHub CLI, Vault, Terraform, Packer), izstr\u0101d\u0101t\u0101ju kontiem, Git savienojuma parametriem, npm un PyPI iestat\u012bjumiem, failiem ar vides main\u012bgajiem, SSH, PGP un TLS sl\u0113gtajiem atsl\u0113g\u0101m, AI r\u012bku iestat\u012bjumiem, p\u0101rl\u016bkprogrammas datu b\u0101z\u0113m ar s\u012bkdatn\u0113m, saglab\u0101tajiem datiem un v\u0113sturi, inform\u0101ciju par procesiem un vides main\u012bgajiem. Atkl\u0101tie dati tiek \u0161ifr\u0113ti, izmantojot AES-256-CBC + RSA-4096 algoritmus, un tiek nos\u016bt\u012bti k\u0101 p\u0101rbaudes piepras\u012bjums vietnei litellm.dev, kuru izveidoju\u0161i noziedznieki. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LiteLLM, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 23 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Docker-\u043e\u0431\u0440\u0430\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 LiteLLM — \u0432 \u043c\u0430\u0440\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u044e LiteLLM 1.107.0, \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183962","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 \u013caunpr\u0101t\u012bgais programmat\u016bra ievietota PyPI paket\u0113 un Docker att\u0113l\u0101 ar LiteLLM | ProHoster","description":"Re\u0123istr\u0113ta \u013caunpr\u0101t\u012bga LiteLLM bibliot\u0113kas izlaiduma publik\u0101cija PyPI repozitorij\u0101, kas ned\u0113\u013c\u0101 sasniedz 23 miljonus lejupiel\u0101\u017eu, k\u0101 ar\u012b \u013caunpr\u0101t\u012bga koda ievieto\u0161ana projekta ofici\u0101laj\u0101 Docker att\u0113l\u0101.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/malware-injected-into-litellm-pypi-package-and-docker-image","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 PyPI-\u043f\u0430\u043a\u0435\u0442 \u0438 Docker-\u043e\u0431\u0440\u0430\u0437 \u0441 LiteLLM \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LiteLLM, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 23 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043d\u0435\u0434\u0435\u043b\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Docker-\u043e\u0431\u0440\u0430\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/malware-injected-into-litellm-pypi-package-and-docker-image","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-22T15:40:40+00:00","article:modified_time":"2026-10-22T15:40:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=183962"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183962\/revisions"}],"predecessor-version":[{"id":183963,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/183962\/revisions\/183963"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=183962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=183962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=183962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"