Hackers Poisoned the LiteLLM Repository to Exfiltrate API Credentials.
Supply Chain Alert: LiteLLM Hit by PyPI Account Hijack, Malicious Versions Exfiltrate Corporate API Keys LiteLLM , a popular open-source AI API Gateway, has issued an urgent warning to its users following a successful hijacking of its PyPI (Python Package Index) account. On March 24, attackers managed to upload two compromised versions 1.82.7 and 1.82.8 which contained embedded malicious code designed to steal sensitive corporate API keys. The malicious packages remained active for approximately three hours before being detected and removed. The Target: Centralized AI Infrastructure LiteLLM has become a critical infrastructure component for many enterprises, acting as a unified gateway for multiple AI providers (such as OpenAI, Anthropic, and Google). Organizations typically store their primary API keys within the LiteLLM gateway, allowing internal applications to access AI services through a single point of control. This centralized model, while efficient for bud...