Litellm compromised with credential stealer

[mgetzflex]

Malicious versions appear to be 1.82.7 and later, origin is a compromise of the owners account BerriAI/litellm#24512

Related HN Thread: https://news.ycombinator.com/item?id=47501729

[miketheman]

PYSEC Advisory published, unclear why it wasn't picked up by sync.

[shelbyc]

Hi @mgetzflex and @miketheman, PYSEC advisories aren't automatically published in an unreviewed state the way advisories sourced from NVD are. However, my teammates and I prioritized getting GHSA-5mg7-485q-xm76 published, and the GHSA is now live and issuing alerts.

[miketheman]

Hey @shelbyc ! Thanks for clarifying that. Is there something that we should do over on PYSEC that would increase the quality bar and speed up the delivery of these reports similar to how NVD are automatically added?