LiteLLM release pipeline hacked to distribute credential-stealing malware
Summary
Hackers compromised the software release pipeline of LiteLLM, an open-source AI gateway, and distributed a version containing credential-stealing malware and a remote access trojan via PyPI and Docker images. The attackers utilized stolen GitHub credentials to redirect the release workflow to a malicious repository, potentially exposing cloud credentials and API keys from infected systems.
IFF Assessment
This incident highlights a significant supply chain attack that led to the distribution of malware, directly impacting the security of systems utilizing the compromised software.
Defender Context
This incident serves as a stark reminder of the risks associated with open-source supply chains, particularly for AI-related tools. Defenders should scrutinize the provenance of software components, implement robust vulnerability scanning and dependency checking, and consider measures to isolate environments where AI gateways are deployed to limit the blast radius of potential compromises.