LiteLLM 1.107.0 on PyPI and Docker Carried Malware After Leaked Admin Key Was Misused

·5 views

An administrative key for an internal LiteLLM Agent Platform deployment was accidentally committed to a public repository on May 27, 2026, and deleting the file three hours later did not revoke it. In October, an attacker used that key to pull configuration data containing a GitHub CLI token belonging to a maintainer of LiteLLM's GitHub organization. With that token, the attacker gained owner-level access, ran workflows that exfiltrated more maintainers' tokens, and pushed a change to the release pipeline. On October 21, malicious litellm 1.107.0 wheels were published to PyPI and matching Docker tags were pushed, and they remained available for about two hours before removal. LiteLLM said the malicious files were never part of its official v1.107.0 source tag, and Wiz estimated roughly 49,000 downloads during that window.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Granting One User Write Access Without chmod 777: Using POSIX ACLs on Linux

A common shortcut for giving a deploy user write access to a single directory is chmod 777, which exposes the files to every account on the host. Adding the user to the directory's group is another option, but it grants that group's access everywhere it applies and may not take effect in an already-running session. POSIX ACLs offer a per-object alternative that grants permissions to a named user or group without changing ownership or opening access to everyone. The article explains that ACLs add named entries alongside the traditional owner, group, and other bits, with a mask entry acting as a ceiling on named users and groups. It walks through setting up a setgid shared directory and granting a deploy user access with setfacl, noting that the capital X flag grants execute only to directories.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Reflects on Daily Painkiller Reliance While Coding and Its Health Risks

A developer writing on DEV Community says that, as they have gotten older, they have come to rely on Loxonin, a painkiller, almost every day while working on software. They note they have heard that taking too much of the drug is harmful. The post offers a personal account rather than a formal study or medical guidance. No specific dosage figures or medical conclusions are provided in the item.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

pam_exec environment data is not a safe channel for secrets

The article warns that pam_exec, a PAM module that runs external commands during authentication stages, exposes PAM items as environment variables that can be influenced by clients or service configuration. Scripts that parse these values as shell fragments, log them insecurely, or use them in command lines may introduce vulnerabilities. The expose_authtok option is especially risky because it passes the authentication token to the called command, which could leak credentials if the command is writable or insecure. The author recommends administrator-owned helpers, fixed executables, protected logs, and dedicated file descriptors or protected temporary files for secrets. Thorough testing of failure paths is also advised, since the PAM control flags determine whether errors accidentally allow authentication.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Python Scraper Pulls Blinkit Prices and Stock Levels Per Dark Store

Blinkit, India's 10-minute grocery delivery app, shows selling price, MRP, discount, rating and shelf stock on each product card. A developer describes a Python script that exports a full category to CSV, despite Cloudflare blocking plain requests, which returns HTTP 403. Routing requests through Scrape.do with residential Indian proxies gets past the wall, and the data is read from an inline PRELOADED_STATE script. The author notes that prices, stock counts and product lists depend on the delivery location, since Blinkit serves each address from its nearest dark store. Categories also show only 30 products before switching to a POST pagination API that returns 15 products per call.

0 comments Read more at DEV Community