Evidence · DiggingBeagle record
Datadog: Compromised LiteLLM PyPI and Docker releases
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsLiteLLM 1.107.0 turned trusted distribution into AI credential theft: Datadog identified startup execution through cook.pth and sitecustomize.py and credential collection targeting AI-provider, developer and cloud secrets.
Malicious package and credential-stealing payload analysis