Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256VerifiedSignal 61/100
03ac2a8b752605d1d7710979c17ff18b03dd978203ba23ba97fd8ce3d6f897ea
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 3 reports: litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader; LiteLLM Compromised, Steals Credentials; LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
78%
Signal Score
61 / 100
IDS Rule
Yes
Threat Context
Tags
Feed Intelligence Summary
3 reports78% confidence
Step Security
6d ago
litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
18 IOCs in report
Socket Security
6d ago
20 IOCs in report