LiteLLM 1.107.0 on PyPI was malicious (Oct 21): it runs on every Python start via a .pth file.

#python #redditpython #litellm #rotate #latest

Reading 0:00

15s threshold

I wrote this up. How to check safely and what to rotate
Short version: if you installed an unpinned litellm between 11:39 and 13:23 UTC on October 21, or pulled the latest, main-latest, main-stable or v1.107.0 Docker tags between 11:46 and 14:20 UTC, treat the machine as compromised. Don't start with pip, because the cook.pth and sitecustomize.py files run on every interpreter start. Search the filesystem first, rebuild with litellm==1.106.2, and rotate keys. All of it comes from LiteLLM's own incident report.

submitted by /u/Key-Koala-8259
[link] [comments]

Menu

LiteLLM 1.107.0 on PyPI was malicious (Oct 21): it runs on every Python start via a .pth file.