malware pypi
litellm
discovered 2026-03-24litellm is identified in the SafeDep analysis "Malicious litellm 1.82.8: Credential Theft and Persistent Backdoor". >-
Threat types
credential_stealer data_exfiltration rat persistence
Malicious versions
- 1.82.8
Campaigns
Indicators
Techniques
- ttp T1195.001 Supply Chain Compromise: Compromise Software Dependencies and Development Toolsuses
- ttp T1059.006 Command and Scripting Interpreter: Pythonuses
- ttp T1552.001 Unsecured Credentials: Credentials In Filesuses
- ttp T1041 Exfiltration Over C2 Channeluses
- ttp T1105 Ingress Tool Transferuses
- ttp T1071.001 Application Layer Protocol: Web Protocolsuses
- ttp T1546 Event Triggered Executionuses
- ttp T1027 Obfuscated Files or Informationuses
