Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
SHA256VerifiedSignal 61/100
bd1aeee419ea36da9aa2b657288da4101887be468f020ac63d22ba6ed84a3ea5
Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Found in 3 reports: litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader; LiteLLM Compromised, Steals Credentials; LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
SHA-256 Hash
SHA-256 file hash — primary identifier for malware samples.
MISP Category
Artifacts Dropped
Hash Algorithm
SHA256
Confidence
78%
Signal Score
61 / 100
IDS Rule
Yes
Threat Context
Tags
Feed Intelligence Summary
3 reports78% confidence
Step Security
6d ago
litellm 1.107.0 Compromised on PyPI: Backdoored Wheels Drop a Credential Stealer and an Hourly Remote Code Loader
18 IOCs in report
Socket Security
6d ago
20 IOCs in report