SafeDep

SafeDep builds software-supply-chain security tools for evaluating open-source dependencies and detecting malicious packages.

Writing, research & talks

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoorsafedep.io
SafeDep analyzes the compromised LiteLLM 1.107.0 PyPI release, which installs three files in site-packages that run a credential stealer and a remote-code backdoor at every Python start. Covers how the implant got in, the payloads, a timeline, and indicators of compromise.
Original source