Socket (@SocketSecurity) on X

X (formerly Twitter) ยท

1 min read Original article โ†—

Post

Post

Socket on X: "๐Ÿšจ LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised. Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools."

Conversation

@SocketSecurity

๐Ÿšจ LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised. Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.