LiteLLM 1.107.0 on PyPI was compromised — installs a credential stealer

Diego García · 13 likes

rotating openai, anthropic, and azure keys right now. my afternoon is gone

Minji Kim · 1 likes

dont forget the vector db and langfuse keys, people always forget those

Noor Janssens · 8 likes

my CI pulled it at 3am. love waking up to that

Finn Brown · 4 likes

pour one out for you friend

Mateo Cruz · 6 likes

of course its the package that has ALL your API keys. attackers are not dumb

Noah Johansson · 3 likes

one proxy to rule them all, one proxy to leak them

Mateo Cruz · 3 likes

we pin with hashes in requirements, never auto bump. boring practice, saved us today

Rafael Almeida · 3 likes

pip-compile --generate-hashes is underrated

Luca Bianchi · 1 likes

boring is a feature in security

Mariana Costa · 3 likes

Does uv lockfile protect against this or only if you didnt update recently?

Paolo Garcia · 13 likes

lock protects you only if you didnt regenerate it after the bad version dropped

Silver Fern · 0 likes

it pins hashes so yes, as long as your lock was made before

Mariam Said · 2 likes

PyPI really needs mandatory trusted publishing for popular packages

Aarav Sharma · 13 likes

they are moving that way but its opt in still

Angel Reyes · 0 likes

trusted publishing doesnt help if the maintainers CI itself is popped tbh

Paper Marauder · 0 likes

how long was it up before pulled?

Hugo Martin · 0 likes

few hours from what i read. enough for CI pipelines with unpinned deps to grab it

Inês Ferreira · 0 likes

this is why our gateway runs in its own network with egress allow list. stealer couldnt phone home

Maya Putri · 1 likes

egress filtering is the most underrated control ever, nobody does it because its annoying