Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

Summary: Two malicious LiteLLM releases, versions 1.82.7 and 1.82.8, sat on PyPI for about 40 minutes on March 24 carrying code that harvested cloud keys, SSH keys, Kubernetes tokens, and database passwords and sent them to an attacker-controlled domain. CloudSEK says a dataset built from roughly 434,000 captured files maps potential exposure to more than 2,500 organizations, a figure it describes as captured loot and logs rather than a victim count.
What's compelling: Version 1.82.8 included litellm_init.pth, which Python executes at interpreter startup, so any host that installed it ran the payload whether or not anything imported LiteLLM - and the FBI's July 2 advisory warns that credentials taken in this campaign will likely be weaponized long after the initial compromise.

Read the original at The Hacker News ↗

Topics: Detection & Response
Mentions: CVE-2026-33634
Related: CVE-2026-33634: Aquasecurity Trivy Embedded Malicious Code Vulnerability Known Exploited Vulnerabilities · Mar 26, 2026
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials Cyber Risks ·
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026