Tip of the week: check whether LiteLLM 1.107.0 affects you
How to check whether you were exposed to LiteLLM 1.107.0, which according to LiteLLM contained malware, and the order in which to clean up.
← NewsSource of truthdocs.litellm.ai
LiteLLM
2 stories
Source of truthdocs.litellm.ai
LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.