Source item
Open original source ↗Software source code supply-chain-attacks are going to be very common with AI. Stay SAFU!
Quoted context
These are the quoted author’s words.
LiteLLM HAS BEEN COMPROMISED, DO NOT UPDATE. We just discovered that LiteLLM pypi release 1.82.8. It has been compromised, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate. link below
hnykda ↗