LiteLLM Compromised in Fresh Supply Chain Attack
Summary
Hackers have compromised LiteLLM, an open-source project facilitating LLM API access, through a supply chain attack. The attackers utilized compromised GitHub CLI OAuth tokens to push and approve malicious packages onto PyPI and Docker repositories.
IFF Assessment
This is bad news for defenders as a popular tool for LLM API access has been compromised, potentially exposing users to malicious code through its supply chain.
Defender Context
This incident highlights the continued threat of supply chain attacks targeting widely used open-source projects, particularly those in the rapidly evolving AI ecosystem. Defenders should be vigilant about the dependencies they integrate, implement robust software supply chain security practices, and monitor for suspicious activity within their development and deployment pipelines.