Post

Microsoft Threat Intelligence
@threatintel.microsoft.com

A compromised LiteLLM 1.107.0 release added files that Python could execute during normal interpreter initialization. Applications did not need to import LiteLLM for the payload to run; starting Python in an affected environment could be enough. msft.it/63324axjam

msft.itInside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks | Microsoft Security BlogMicrosoft Threat Intelligence analyzes the LiteLLM 1.107.0 compromise, including Python startup hooks, credential theft, remote code loading, detections, and mitigations.
Microsoft Threat Intelligence
@threatintel.microsoft.com

Microsoft analyzed two execution paths: a credential collector targeting authentication material across developer tools, cloud environments, browsers, and infrastructure, and a Unix-oriented loader capable of retrieving and executing additional Python code.

1 repost2 likes

Microsoft Threat Intelligence
@threatintel.microsoft.com

Endpoint observations on Windows and macOS matched the collector’s discovery, encryption, and outbound connection behavior. Starting Python in an affected environment could activate the payload, so investigators should avoid using Python or pip during evidence collection.