Evidence · DiggingBeagle record
Wiz: LiteLLM 1.107.0 credential theft
- Source role
- primary disclosure
Evidence record
Claim-level citations (2)
- supportsLiteLLM 1.107.0 turned trusted distribution into AI credential theft: Wiz places PyPI publication at 11:39 UTC and quarantine at 13:20 UTC; compromised Docker images remained available until 13:53 UTC. Download counts are not victim counts.
Executive summary; Timeline
- supportsLiteLLM 1.107.0 turned trusted distribution into AI credential theft: Wiz observed AWS identity and Bedrock model-enumeration requests about 4.5 hours after exfiltration across multiple environments; that establishes reconnaissance, not paid model consumption.
Post-Exploitation Activity