Slow Mist: LiteLLM Vulnerability Attacker Has Stolen Approximately 300GB of Data

According to a post by 23pds (Shan Ge), Chief Information Security Officer of Slow Mist, on platform X, it is reported that the attacker exploiting the LiteLLM vulnerability has stolen approximately 300GB of data and compromised around 500,000 credentials. He advises all cryptocurrency developers to immediately verify and rotate relevant keys and credentials as soon as possible, check logs, access records, and exposure of sensitive data to avoid losses similar to the Trust Wallet incident.

Previously reported, litellm, with 97 million monthly downloads, suffered a supply chain attack; a simple installation could steal all sensitive credentials such as SSH keys.