20535d8fa11f786a6c24df7488a0e449ed5f09adSHA-1 hash
Reported by 1 independent source · first reported by Socket · last reported
Last reported 3 days ago
What the reports say
1 report, newest first · the exact sentence from each-
LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials“…to the Linux amd64 image identifies the private BerriAI/project-releaser workflow, run 39587059944, and source revision 20535d8fa11f786a6c24df7488a0e449ed5f09ad.”
Indicators reported together
named in the same reports- hxxps://github[.]com/Berri-AI/litellmin 1 report
- litellm-1.107.0[.]datain 1 report
- hxxp://www.litellm[.]dev/healthcheckin 1 report
- www.litellm[.]devin 1 report
- 7598727f209d7170…375729aeb86din 1 report
- 7f191632e7320705…6f5042b92bdbin 1 report
- 9dd0a3926f96a37e…e9531390be25in 1 report
- 34bef04fe88ac9d0…acf5968305fain 1 report
- 6ea3d8ef6cf73a72…84e66675d2dfin 1 report
- 20a59e5a285799e7…4e998c2cd24bin 1 report
- 1bbcb1443bc962e4…d3ac126c339ein 1 report
- bd1aeee419ea36da…ba6ed84a3ea5in 1 report
- 56b74573eed6e4aa…98caf1f4bcdfin 1 report
- hxxps://raw.githubusercontent[.]com/letters9813/pythonclient-test/main/domain.txtin 1 report
- 783c43bc455d2e05…325cfeab1433in 1 report
- a898fd08ad220fed…26545ecc4218in 1 report
Copy these 16 indicators · defanged
Thanks — we review every report.