Reverse Engineering the LiteLLM PyPI Supply Chain Attack | From Malicious Package to Infostealer

[BLUF]
The Python package light-llm version 1.107.0 contains a malicious payload that steals developer credentials, including AWS keys and browser data, while employing AES encryption to evade detection 2:40.

Key Takeaways:
• The malware is hidden in the data folder of the wheel file, which is absent in previous versions, indicating a new supply chain attack vector 2:20.
• The payload targets developers specifically by stealing SSH keys, browser profiles, and AWS credentials, leveraging the typical environment of Python users 18:25.
• Encrypted data is exfiltrated using a hardcoded public key, making reverse engineering the victim's identity difficult for analysts without the private key 23:30.
• The malware executes by importing a malicious module upon installation or runtime, effectively bypassing standard source code reviews 32:50.

[Closing statement]
This incident highlights the critical need for verifying binary wheels against source code to detect hidden malicious components in popular open-source libraries.

Sources:

• 2:40 Explanation of the typical malware payload structure for Python packages.
• 2:20 Identification of the new data folder in version 1.107.0 as the attack vector.
• 18:25 Analysis of the malware's focus on developer-specific credentials like AWS and SSH keys.
• 23:30 Description of the AES encryption method used to secure exfiltrated data.
• 32:50 Discovery of the malicious module import that triggers the infection.