Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
Versions 1.82.7 and 1.82.8 of the LiteLLM package on PyPI have been compromised with a malicious base64 blob that triggers forkbomb-like behavior.
About an hour ago new versions have been deployed to PyPI.
I was just setting up a new project, and things behaved weirdly. My laptop ran out of RAM, it looked like a forkbomb was running.
I've investigated, and found that a base64 encoded blob has been added to proxy_server.py.
It writes and decodes another file which it then runs.
I'm in the process of reporting this upstream, but wanted to give everyone here a headsup.
It is also reported in this issue: https://github.com/BerriAI/litellm/issues/24512
-
Looks like this originated from the trivvy used in our ci/cd - https://github.com/search?q=repo%3ABerriAI%2Flitellm%20trivy... https://ramimac.me/trivy-teampcp/#phase-09
-
If you're on the proxy docker, you were not impacted. We pin our versions in the requirements.txt
-
The package is in quarantine on pypi - this blocks all downloads.
We are investigating the issue, and seeing how we can harden things. I'm sorry for this.
- Krrish
Source: Hacker News
