A malicious supply chain attack has been identified in the Python Package Index (PyPI) package `litellm` version 1.82.8, where the published wheel contains a malicious `.pth` file that is automatically executed by the Python interpreter on every startup without requiring an explicit import. The article does not provide a CVSS score, specific affected version ranges beyond the single compromised version, a fixed version, or a workaround. It emphasizes the need for broader supply chain security measures like SBOMs, SLSA, and SigStore.
This is news : A malicious supply chain compromise has been identified in the Python Package Index package litellm version 1.82.8. The published wheel contains a malicious .pth file (litellm_init.pth, 34,628 bytes) which is automatically executed by the Python interpreter on every startup, without requiring any explicit import of the litellm module. There are a lot of really boring things we need to do to help secure all of these critical libraries: SBOMs, SLSA, SigStore. But we have to do them.