security: lock litellm version to exclude compromised releases#23
Conversation
Lock litellm dependency to exclude versions 1.82.7 and 1.82.8, which were compromised by the TeamPCP threat actor on March 24, 2026. These versions contained malicious code that steals cloud credentials, SSH keys, and cryptocurrency wallet data. The vulnerability was introduced via a supply chain attack where the attackers obtained PyPI publishing credentials through a compromised Trivy security scanner in the upstream CI/CD pipeline. Changes: - Update pyproject.toml to constrain litellm to <1.82.7 - Regenerate uv.lock with litellm 1.82.6 (latest safe version) References: - BerriAI/litellm#24518 - https://www.ox.security/blog/litellm-malware-malicious-pypi-versions-steal-cloud-and-crypto-credentials/ Signed-off-by: Wayne Sun <gsun@redhat.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
📝 WalkthroughWalkthroughThe Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
2 participants
Summary
This PR locks the litellm dependency to exclude compromised versions 1.82.7 and 1.82.8, which were published to PyPI by the TeamPCP threat actor on March 24, 2026.
Background
On March 24, 2026, two malicious versions of litellm (1.82.7 and 1.82.8) were published to PyPI containing credential-stealing malware. The attack vector was a supply chain compromise where attackers:
The malware targeted:
PyPI has since yanked these versions, but projects with open-ended version constraints (
>=1.80.0) could still inadvertently install them from caches or mirrors.Changes
>=1.80.0to>=1.80.0,<1.82.7References
Test Plan
Summary by CodeRabbit
litellmdependency constraint to exclude versions 1.82.7 and later.