We don't publish
your competitive advantage.

IFUsing litellm versions 1.82.7 or 1.82.8 from PyPI (malicious package with litellm_init.pth credential stealer).

THENImmediately upgrade litellm to a version later than 1.82.8 (e.g., 1.82.9 or higher). Rotate all API keys, tokens, and secrets that may have been exposed while the compromised version was installed. Audit system logs for unauthorized access.

IFA malicious .pth file (litellm_init.pth) was found in the litellm 1.82.8 PyPI package that automatically executes a credential-stealing script on Python startup.

THENImmediately uninstall litellm 1.82.8 (pip uninstall litellm==1.82.8). Scan your system for any exfiltration to the domain models.litellm.cloud by checking network logs or cURL commands. Rotate all credentials that may have been exposed: environment variables, API keys, SSH keys, cloud provider keys, CI/CD secrets, and database passwords. Review all systems where the package was installed including local machines, CI/CD pipelines, Docker containers, and production servers. Monitor for any unauthorized use of stolen credentials.

IFA PyPI package (litellm 1.82.8) was installed that contains a malicious .pth file which executes on every Python interpreter start, stealing credentials.

THENImmediately remove the affected package, revoke all exposed credentials, scan for unexpected .pth files in site-packages, and enforce package version pinning and integrity verification. Monitor outbound connections to unknown destinations and consider blocking execution of .pth files via sitecustomize.py or security policies.

IFA malicious .pth file is placed in site-packages, automatically executing a credential-stealing script on Python interpreter startup.

THENImmediately yank the compromised package from PyPI and notify users. Implement package integrity checks using SHA256 hashes from RECORD files, and block or audit packages that include unexpected .pth files. Disable automatic execution of .pth files in non-containerized environments by setting the PYTHONNOUSERSITE environment variable or using Python's -S flag. For CI/CD, enforce dependency scanning with tools like pip-audit or safety.