LiteLLLM Compromised: Credentials Exposed via Base64 Encoding

LiteLLLM [compromised] - Python library and proxy server that makes applications Llm-agnostic - Was a catchy phrase that I thought was going to help with model switching efficiently instead of custom code... until... it was found out that, it contains litellm_init.pth with base64 encoded instructions to send all the credentials it can find to remote server + self-replicate!! Another reason why you don't want to just blindly follow the "Agent" hype with a a flashy site, PiP install and use it in prod. . https://lnkd.in/g5NDyj8C

To view or add a comment, sign in

Explore content categories