LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.
Source of truthdocs.litellm.ai/…/security-incident-oct…According to LiteLLM, its release pipeline was compromised on October 21 and version 1.107.0 was pushed to PyPI and Docker with malware that steals credentials. It was on PyPI from 11:39 to 13:23 UTC and on Docker Hub from 11:46 to 14:20 UTC. LiteLLM recommends pinning to 1.106.2. If 1.107.0 was installed on a host with outbound internet access, LiteLLM says to assume exfiltration succeeded and to rotate the instance IAM role, every provider key in the LiteLLM proxy database plus the master and virtual keys, the DATABASE_URL password, and any secret in the environment of any process on the host. Why it matters: according to Microsoft, simply starting Python in an affected environment could be enough, and the code targeted cloud credentials, SSH keys and LiteLLM proxy database data.
Other sources: docs.litellm.ai/…/security-incident-oct…microsoft.com/…/inside-the-litellm-1-10…socket.dev/blog/litellm-compromise
Related stories
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.
EDPB: when the GDPR applies to people wearing smart glasses
In an initial statement, the European Data Protection Board explains when people recording with smart glasses have obligations under the GDPR.