Worth exploring safeguard for some: The automatic import can be suppressed using Python interpreter’s -S option.
This would also disable site import so not viable generically for everyone without testing.
Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
41–50 of 569 posts
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#42This is tied to the TeamPCP activity over the last few weeks. I've been responding, and keeping an up to date timeline. I hope it might help folks catch up and contextualize this incident:
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#43Look like the Founder and CTO account has been compromised. https://github.com/krrishdholakia
[deleted]
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#44I was running it (as a proxy) in my homelab with docker compose using the litellm/litellm:latest image https://hub.docker.com/layers/litellm/litellm/latest/images/... , I don't think this was compromised as it is from 6 months ago and I checked it is the version 1.77.
I guess I am lucky as I have watchtower automatically update all my containers to the latest image every morning if there are new versions.
I also just added it to my homelab this sunday, I guess that's good timing haha.
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#45[dead]
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#46That's a bad supply-chain attack, many folks use litellm as main gateway
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#47It's been quarantined on PyPI
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#48LiteLLM is now in quarantine on PyPI [1]. Looks like burning a recovery token was worth it.
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#49This is a brutal one. A ton of people use litellm as their gateway.
Do you feel as if people will update litellm without looking at this discussion/maybe having it be automatic which would then lead to loss of crypto wallets/ especially AI Api keys?
Now I am not worried about the Ai Api keys having much damage but I am thinking of one step further and I am not sure how many of these corporations follow privacy policy and so perhaps someone more experienced can tell me but wouldn't these applications keep logs for legal purposes and those logs can contain sensitive information, both of businesses but also, private individuals perhaps too?
Re: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
#50It will only take one agent-led compromise to get some Claude-authored underhanded C into llvm or linux or something and then we will all finally need to reflect on trusting trust at last and forevermore.