Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library
← Back to context

Comment by outside2344

3 days ago

Is it just in 1.82.8 or are previous versions impacted?

4 comments

outside2344

Reply

Imustaskforhelp  3 days ago

1.82.7 is also impacted if I remember correctly.

  • GrayShade  3 days ago

    1.82.7 doesn't have litellm_init.pth in the archive. You can download them from pypi to check.

    EDIT: no, it's compromised, see proxy/proxy_server.py.

    • cpburns2009  3 days ago

      1.82.7 has the payload in `litellm/proxy/proxy_server.py` which executes on import.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities