SlowMist: LiteLLM Vulnerability Attacker Has Stolen Approximately 300GB of Data

Odaily News According to a post by 23pds (Shan Ge), Chief Information Security Officer of SlowMist, on the X platform, it is reported that the attacker exploiting the LiteLLM vulnerability has stolen approximately 300GB of data and compromised around 500,000 credentials. He advises all cryptocurrency developers to immediately verify, rotate relevant keys and credentials as soon as possible, and check logs, access records, and exposure of sensitive data to avoid losses similar to the Trust Wallet incident.

Previously, it was reported that litellm, with 97 million monthly downloads, suffered a supply chain attack, where a simple installation could steal all sensitive credentials such as SSH keys.