Post

github.com[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 — credential stealer · Issue #24512 · BerriAI/litellm[Security]: CRITICAL: Malicious litellm_init.pth in litellm 1.82.8 PyPI package — credential stealer Summary The litellm==1.82.8 wheel package on PyPI contains a malicious .pth file (litellm_init.p...

Larry Osterman

@larryosterman.github.io

Any idea what's up with the hundreds of "great tip" comments on the issue?

24/3/26, 2:01 pm0 reposts1 like

Savannah Ostrowski

@savannah.dev

24 Mar

I believe the general consensus is that it’s the attacker trying to stifle discussion. Very, very strange.

David Mayo 🦜

@dcmayo.bsky.social

24 Mar

Thanks, that fixed it for me. Ever since I learned about .pth files, they seemed like a good vector to cause mischief, all buried away in a place the vast majority would never look, and able to execute arbitrary code.