x.comadvisoryJFrog Security (@JFrogSecurity) on X
JFrog Security Research warns that the LiteLLM 1.107.0 release on PyPI contains malicious code, as part of a supply-chain attack. It advises avoiding that version and investigating any environment where it was installed or executed. The post gives no technical detail, payload description or IOCs, and says a blog post will follow.
TL;DR JFrog flags LiteLLM 1.107.0 on PyPI as malicious and tells users to avoid it and check where it ran.
Technologies named here
Related in Supply Chain
