LiteLLM supply-chain attack reported on PyPI and Docker
Original title: New LiteLLM Supply Chain Attack Hits PyPI and Docker
The supplied page text does not describe the malicious packages, payloads, or who was affected.
SOCRadar’s headline says a new LiteLLM supply-chain attack hit PyPI and Docker. The fetched page is site navigation and promotions, not the article, so no packages, versions, indicators, or impact are available from this text. A site banner separately advertises PHP2Shell as two CVSS 9.2 PHP flaws that may allow remote code execution, without further detail.
Unconfirmed: The article body was not included, so the attack claim rests only on the headline.
- Only the headline identifies LiteLLM, PyPI, and Docker as involved.
- No CVE identifiers or fixed versions appear in the supplied text.
Impact: Supply-chain compromise of LiteLLM packages claimed
| Product | Affected |
|---|---|
| LiteLLM | — |
- Products
- LiteLLM
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | litellm.dev | once72129118c59f5636c0bb marker. Search egress logs for www.litellm[.]dev/healthcheck and container inventories for the image diges |
| domain | raw.githubusercontent.com | L hxxp://www[.]litellm[.]dev/healthcheck Loader dead drop raw[.]githubusercontent[.]com/letters9813/pythonclient-test/main/domain.txt Lookali |
| domain | www.litellm.dev | is clean. Indicator Type Value Exfiltration URL hxxp://www[.]litellm[.]dev/healthcheck Loader dead drop raw[.]githubusercontent[ |
| ipv4 | 165.227.201.8 | 46eacf5968305fa Attacker source IPs (Wiz) 168.100.8[.]57, 165.227.201[.]8 Is It Safe to Run pip to Remove LiteLLM 1.107.0? No. A |
| ipv4 | 168.100.8.57 | 1d15b94f233ac8aa46eacf5968305fa Attacker source IPs (Wiz) 168.100.8[.]57, 165.227.201[.]8 Is It Safe to Run pip to Remove LiteLL |
| sha256 | 1bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339e | o github[.]com/Berri-AI/litellm Image index digest sha256:1bbcb1443bc962e45f5aad53fe3d2c30600e0379715fb6c664cdd3ac126c339e cook.pth (SHA-256) 7f191632e7320705d154b85204f1ae546b543a |
| sha256 | 34bef04fe88ac9d0aae0475630b1738681d15b94f233ac8aa46eacf5968305fa | 139cc4ebef3ef9e2efe9531390be25 sitecustomize.py (SHA-256) 34bef04fe88ac9d0aae0475630b1738681d15b94f233ac8aa46eacf5968305fa Attacker source IPs (Wiz) 168.100.8[.]57, 165.227.201[.]8 |
| sha256 | 7f191632e7320705d154b85204f1ae546b543acbd7e8861229b76f5042b92bdb | 3d2c30600e0379715fb6c664cdd3ac126c339e cook.pth (SHA-256) 7f191632e7320705d154b85204f1ae546b543acbd7e8861229b76f5042b92bdb cook.py (SHA-256) 9dd0a3926f96a37eb86cf1ee2310d9be93139cc |
| sha256 | 9dd0a3926f96a37eb86cf1ee2310d9be93139cc4ebef3ef9e2efe9531390be25 | 4f1ae546b543acbd7e8861229b76f5042b92bdb cook.py (SHA-256) 9dd0a3926f96a37eb86cf1ee2310d9be93139cc4ebef3ef9e2efe9531390be25 sitecustomize.py (SHA-256) 34bef04fe88ac9d0aae0475630b173 |
| url | http://www.litellm.dev/healthcheck | a host is clean. Indicator Type Value Exfiltration URL hxxp://www[.]litellm[.]dev/healthcheck Loader dead drop raw[.]githubusercontent[.]com/letter |
From the original article
11 min read at socradar.io
A new LiteLLM supply chain attack has turned version 1. 107. 0, an official release of the popular open-source LLM gateway, into a credential stealer.
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.