alt Hacker NewsTell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
About an hour ago new versions have been deployed to PyPI.
I was just setting up a new project, and things behaved weirdly. My laptop ran out of RAM, it looked like a forkbomb was running.
I've investigated, and found that a base64 encoded blob has been added to proxy_server.py.
It writes and decodes another file which it then runs.
I'm in the process of reporting this upstream, but wanted to give everyone here a headsup.
It is also reported in this issue: https://github.com/BerriAI/litellm/issues/24512
Comments
ddactic • yesterday at 1:39 PM
[dead]
rsmtjohn • yesterday at 2:08 PM
[dead]
osaka2077 • yesterday at 4:03 PM
[dead]
peytongreen_dev • yesterday at 1:27 PM
[dead]
mitul005 • yesterday at 2:04 PM
[dead]
dot_treo • yesterday at 12:28 PM
[dead]
thibault000 • yesterday at 2:38 PM
[dead]
bustah • yesterday at 5:36 PM
[dead]
sy0115 • yesterday at 6:02 PM
[dead]
bustah • yesterday at 5:37 PM
[dead]
hahaddmmm12x • yesterday at 1:46 PM
[dead]
iamnotai666 • yesterday at 5:15 PM
[dead]
ajoy • yesterday at 7:51 PM
Reminded me of a similar story at openSSH, wonderfully documented in a "Veritasium" episode, which was just fascinating to watch/listen.
➕ show 1 reply
[dead]