LiteLLM 1.107.0 cook.pth and cook.py Python startup persistence

ills3c Intel&Coffee@Ills3C

•updated 5 days ago•13•0•13

Detects the creation of cook.pth or cook.py in Python site-packages or dist-packages directories by package managers or interpreters, followed by a Python interpreter execution on the same device within one hour. This pattern matches the malicious supply chain behavior observed in compromised LiteLLM versions (e.g., 1.107.0) utilizing .pth auto-import chains for persistence and execution.