LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

A malicious release of LiteLLM published to PyPI and Docker registries on Wednesday carried malware designed to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it, marking the second supply chain compromise of LiteLLM this year after an earlier attack in March. Security researcher Kevin Beaumont wrote on Mastodon that "LiteLLM got compromised… again," and Hudson Rock's analysis of a 153GB archive stolen in the March incident linked it to 2,488 corporate domains, including AWS, Samsung, Cisco and Salesforce. Users are being urged to rotate credentials.