Kutheni Oku Kubalulekile
Ngomhla wama-24 kweyoKwindla, ngo-2026, iphakheji edumileyo yePython ilitellm, isango eliyiproxy le-LLM elisetyenziswa ngamawaka abantu enterpriseUkuhambisa ithrafikhi phakathi kwezicelo kunye nababoneleli be-AI abanjengo-OpenAI, Anthropic, Google, kunye ne-AWS Bedrock, kwaphazamiseka buthule kwi-PyPI. Iinguqulelo ezimbini ezinobuthi (1.82.7 kunye ne-1.82.8) zapapashwa ngaphakathi kwemizuzu eli-13 enye kwenye, zithwele umthwalo wemivuzo emininzi owaba iziqinisekiso, wakhupha iimfihlo zelifu, wasasazeka ecaleni kwiikluster zeKubernetes, waza wafaka umnyango wangasemva oqhubekayo onezakhono zokusebenzisa ikhowudi ekude.
Ephantse Ukukhuphela kwemihla ngemihla kwezigidi ezi-3.6 kunye nokusasazwa okunzulu kwiziseko ze-AI zelifu, i-litellm ikwindawo edibana kuyo yonke into abahlaseli banamhlanje abayinqwenelayo: izitshixo ze-API kubo bonke ababoneleli abakhulu be-AI, iziqinisekiso ze-IAM zelifu, iimfihlo zeKubernetes, kunye nezitshixo ze-SSH.
Kodwa isivumelwano se-litellm sasingesosiganeko sodwa. Yayisisiphelo se-a iphulo leentsuku ezintlanu, elineenkqubo zemvelo ezintlanu ngumdlali wezoyikiso owaziwa ngokuba Iqela lePCP, iphulo elaqala latyhefa izikena zokhuseleko (i-Aqua Trivy, i-Checkmarx KICS), laza lasebenzisa ezibiweyo CI/CD iziqinisekiso zokuhla ziye ezantsi ziye kwi-npm, i-OpenVSX, kwaye ekugqibeleni i-PyPI. Abahlaseli basebenzise izixhobo ezixhomekeke kuzo imibutho ukukhusela imixokelelwane yabo yokubonelela.
Olu hlaselo lubonisa utshintsho oluncinci kwindlela ezisongelwa ngayo izinto. Uyilo lweenkqubo ezahlukeneyo, olusebenzisa iindlela ezahlukeneyo zokwenza izinto, lubeka emngciphekweni izixhobo zokhuseleko ukuze zifikelele kwixabiso eliphezulu. Iziseko zophuhliso lwe-AI, ibonisa inqanaba lokucwangcisa kunye nokuvuthwa kokusebenza okuhambelana nezixhobo zokuhlasela ezithengiswayo. Imithwalo yokuhlawula iphindwe ngexesha langempela (iintlobo ezintathu zomthwalo wokuhlawula ziyavela kwikhowudi yomthombo, kuquka iinguqulelo zangaphambili eziphawulweyo), isiseko se-C2 sabhaliswa ngosuku olungaphambi kohlaselo, kwaye iidomeyini zokukhupha zakhethwa ngononophelo ukuze zifane nesiseko somthengisi esisemthethweni. Isixhobo sokuvuna esineenkcukacha esibanzi, esigubungela iindidi ezingaphezu kwe-15 kuquka iithagethi ze-niche ezifana nezitshixo zokusayina zeCardano kunye ne-WireGuard configs, sibonisa inqanaba lobungakanani obupheleleyo obukhomba kuphuhliso lwe-malware oluncediswa yi-AI njengesiphindaphindi samandla.
Ixesha
| Umhla (UTC) | umcimbi |
|---|---|
| Matshi 19 | I-TeamPCP ibeka emngciphekweni iithegi ze-Aqua Trivy GitHub Action, izithathela indawo ngekhowudi enobungozi ephumayo CI/CD iimfihlo ezivela kwiindawo zokugcina amanzi ezisezantsi |
| Matshi 21 | Ukuvumelana kufikelela kwiCheckmarx KICS kunye neAST GitHub Actions kusetyenziswa iindlela ezifanayo |
| Ngomhla wama-22 kweyoKwindla, ngo-06:35 | I-BerriAI ipapasha i-litelm 1.82.6 (uguqulelo lokugqibela olucocekileyo) ngendlela eqhelekileyo CI/CD pipeline esebenzisa iTrivy ukuskena ukhuseleko |
| Matshi 23 | I-TeamPCP ibhalisa iimodeli.litellm.cloud (idomeyini yokuphuma). Ibeka emngciphekweni iiphakheji ezingaphezu kwama-66 npm kunye nolwandiso lwe-OpenVSX |
| Ngomhla wama-24 kweyoKwindla, ngo-10:39 | i-litellm 1.82.7 ipapashwe kwi-PyPI -- umthwalo ohlawulweyo ufakwe kwi proxy_server.py kwi-scope yemodyuli. Isebenza xa ingeniswa |
| Ngomhla wama-24 kweyoKwindla, ngo-10:52 | I-litellm 1.82.8 ipapashwe emva kwemizuzu eli-13 -- yongeza litellm_init.pth, i-Python path configuration hook esebenza kuyo yonke i-Python interpreter startup, kungekuphela nje kwi-litellm imports. Ibonisa i-payload required iteration |
| Ngomhla wama-24 kweyoKwindla, ~16:00 | I-PyPI isusa zombini iinguqulelo emva kweengxelo zoluntu. Iinguqulelo zicinyiwe ngokupheleleyo (azifakwanga) kwisalathiso, nangona ii-tarball ze-CDN zisafumaneka. |
Ifestile yokuvezwa: malunga neeyure ezi-5.5. Ngeli xesha, naluphi na pip install litellm, pip install --upgrade litellmokanye CI/CD pipeline ukutsala inguqulelo yamva nje bekuya kuphumeza umthwalo ohlawulelwayo.
Indlela iMalware Engene Ngayo: I-Cascading Compromise
Iphakheji ye-litellm ayizange iphulwe ngokuthe ngqo. Umhlaseli wayifikelela nge- uhlaselo lwe-supply chain ezimbini:
IiLiteLLM CI/CD pipeline isebenzise iTrivy njengesikena sokhuseleko — isixhobo esenzelwe ukubamba ubuthathaka sasiyindlela yokuhlasela. pipeline iTrivy ebhekiselwe kuyo yithegi eguquguqukayo endaweni yepiniweyo commit SHA, isenzo esichaphazelekileyo siqhubekile ngokuzenzekelayo. Isenzo seTrivy esinobuqhophololo sakhupha iimfihlo zendalo esingqongileyo, kuquka PYPI_PUBLISH i-token, enika i-TeamPCP ukufikelela ngqo kwiprojekthi ye-litellm PyPI.
Le ndlela “yokuyekelela abalindi” luphawu oluphambili lwephulo leTeamPCP. Ngokujolisa izixhobo zokhuseleko kuqala (Trivy, Checkmarx KICS), abahlaseli ngaxeshanye bakhubaza ukubhaqwa kwaye bafumana ukufikelela okufanelekileyo kwiindlela zokuhambisa ezisezantsi.
Uhlalutyo loBugcisa: Umthwalo woMthwalo
Amanqaku okutofa
Version 1.82.7 — Ukuphunyezwa kwinqanaba lemodyuli kwi litellm/proxy/proxy_server.py (umgca 128):
Le khowudi ikwindawo yemodyuli phakathi kwesichazi-magama esichanekileyo nesingqalileyo showwarning() umsebenzi. Isebenza ngoko nangoko xa litellm.proxy.proxy_server ingenisiwe — nto leyo eyenzeka kuyo nayiphi na indlela yokusebenzisa umsebenzi we-proxy we-litelm.
Version 1.82.8 - Yongeziwe litellm_init.pth (Ifayile yoqwalaselo lwendlela yePython):
Python .pth iifayile kwi site-packages/ ziyacutshungulwa kuyo yonke i-startup yetoliki, kodwa kuphela imigca eqala ngo import ziyasetyenziswa njengekhowudi. Umhlaseli usebenzisa oku ngokubophelela wonke umthwalo kwi-single import ingxelo: import os, subprocess, sys; subprocess.Popen(...)Oku kunamandla kakhulu kune-proxy_server.py injection — iyadubula nokuba i-litelm ayikaze ingeniswe, kuyo yonke inkqubo yePython yokuqaliswa. pyproject.toml iguqulwe ukuze ifake le fayile kulwabiwo:
Inguqulelo 1.82.8 ngaloo ndlela iindlela ezimbini ezizimeleyo zokuphumeza: i-proxy_server.py injection (itshaya kwi-litellm proxy import) kunye nefayile ye-.pth (itshaya nakweyiphi na i-Python startup). Ukuphinda-phinda kwayona kuyaphawuleka - iyakhusela ekufumaneni okanye ekususweni kwayo nayiphi na indlela yodwa. Ukunyuka ukusuka kwi-import-time ukuya kwi-startup-time execution kwimizuzu eli-13 emva kwe-1.82.7 kubonisa ukuba umhlaseli wayejonga impumelelo yokuthunyelwa kwaye ephinda-phinda ngokukhawuleza.
Inqanaba loku-1: Ukuqokelela iiMpawu zoBugcisa ngokuPheleleyo
Iskripthi sangaphakathi esichongiweyo sisixhobo esingenazo iinkcukacha ezininzi. os.walk(), glob.glob(), subprocess.check_output(), kunye nefayile ethe ngqo efundayo ukuze kususwe yonke inkqubo:
| udidi | Iithagethi |
|---|---|
| Ukuhlaziywa kwenkqubo | hostname, whoami, uname -a, ip addr, printenv, ip route |
| SSH | ~/.ssh/id_rsa, id_ed25519, id_ecdsa, authorized_keys, known_hosts, config; izitshixo zomsingathi ezivela /etc/ssh/ |
| Ilifu (AWS) | ~/.aws/credentials, ~/.aws/configiziqinisekiso zendima ye-IMDS nge 169.254.169.254Umphathi weeMfihlo ListSecretsi-SSM DescribeParameters |
| Ilifu (i-GCP) | ~/.config/gcloud/ (ukuphindaphinda); $GOOGLE_APPLICATION_CREDENTIALS |
| Ilifu (i-Azure) | ~/.azure/ (recursive); izinto eziguquguqukayo kwimeko-bume |
| Kubernetes | Iithokheni zeakhawunti yenkonzo; ca.crtindawo yegama; kubectl get secrets --all-namespaceszonke iimfihlo nge-K8s API |
| Iifayile zendalo esingqongileyo | .env, .env.local, .env.production, .env.development, .env.staging — kukhangelwe ngokuphindaphindiweyo (ubunzulu 6) ngaphesheya /home, /root, /opt, /srv, /var/www, /app, /data, /tmp |
| Docker | ~/.docker/config.json, /kaniko/.docker/config.json |
| Iithokheni zephakheji | ~/.npmrc, ~/.vault-token, ~/.netrc |
| neeDathabheyisi | ~/.pgpass, ~/.my.cnf, /etc/mysql/my.cnf, /etc/redis/redis.conf, Uqwalaselo lweMongoDB |
| TLS/SSL | Izitshixo zabucala ezivela /etc/ssl/private/Masibhale iisatifikethi, zonke .pem/.key/.p12/.pfx iifayile |
| Git | ~/.git-credentials, ~/.gitconfig |
| CI/CD | terraform.tfvars, terraform.tfstate, .gitlab-ci.yml, Jenkinsfile, ansible.cfg |
| I-Crystal wallets | I-Bitcoin, ivenkile yezitshixo ze-Ethereum, ii-keypairs ze-Solana (i-validator, ivoti, i-stake, i-faucet), izitshixo zokusayina ze-Cardano, i-Litecoin, i-Dogecoin, i-Zcash, i-Dash, i-Ripple, i-Monero |
| Imbali yeShell | .bash_history, .zsh_history, .mysql_history, .psql_history, .rediscli_history |
| Ugunyaziso lwenkqubo | /etc/passwd, /etc/shadow, iilog zogunyaziso (iiseshoni ze-SSH ezamkelweyo) |
| Izitshixo zeWebhook/API | I-Grep yewebhu yeSlackhooks, iwebhu yeDiscordhooks, izitshixo/iimfihlo ze-API kwiifayile zoqwalaselo |
| VPN | Uqwalaselo lweWireGuard oluvela /etc/wireguard/ |
Ububanzi bale harvester buyi-encyclopedic. Ayijolisi nje kuphela kwiinkcukacha zelifu kodwa nakwii-wallets ze-cryptocurrency, iiphasiwedi zedathabheyisi, uqwalaselo lwe-VPN, kunye CI/CD iimfihlo — ezibonisa ukuba umhlaseli uceba ukwenza imali kwiinkqubo ezichaphazelekileyo kwiivekhtha ezininzi.
Inqanaba lesi-2: Ukukhutshelwa okuFihliweyo
Idatha ebiweyo ibethelwa kwaye ikhutshelwa ngaphandle kusetyenziswa inkqubo yokubethela exutyiweyo:
- I-AES-256-CBC ukubethela yonke idatha eqokelelweyo ngesitshixo seseshoni esingacwangciswanga se-32-byte (nge
openssl enc) - RSA-4096 ukubethela isitshixo seseshoni kusetyenziswa isitshixo sikawonke-wonke esifakwe kumhlaseli (i-OAEP padding, nge
openssl pkeyutl) - Zombini iifayile ze-ciphertext zihlanganiswe njenge
tpcp.tar.gz(Itpcpisimaphambili — “TeamPCP” — sivela rhoqo kulo lonke iphulo) - I-HTTPS POST ukuya kwi
https://models.litellm.cloud/kunyeContent-Type: application/octet-stream
Indawo models.litellm.cloud yabhaliswa nge-23 kaMatshi — usuku olunye ngaphambi kohlaselo — kwaye yenzelwe ukudibana neziseko zophuhliso ezisemthethweni ze-litellm (le projekthi yokwenyani isebenzisa litellm.ai). Kwanomkhuseli oqaphela inethiwekhi ohlola ithrafikhi ephumayo usenokungayichazi ithrafikhi kwinto ebonakala ngathi yi-endpoint yemodeli kaLitellm.
Inqanaba lesi-3: Umnyango wangasemva oqhubekayo (sysmon.py)
Umthwalo womvuzo ufaka ucango lwangasemva lokuvota olufihlwe njenge-telemetry yenkqubo:
- Indlela:
~/.config/sysmon/sysmon.py - inkonzo:
sysmon.service(iyunithi yomsebenzisi we-systemd, echazwa njenge-"System Telemetry Service") - ukuziphathaEmva kokulala kwemizuzwana engama-300 yokuqala, iivoti
https://checkmarx.zone/rawrhoqo emva kwemizuzu engama-50 - enze: Khuphela i-URL ebuyiswe yi-C2 ku
/tmp/pglog, iyibeka iyasebenza (chmod 755), uyiqhuba kwiseshoni ehlukanisiweyo - Ukulandelela karhulumente:
/tmp/.pg_statekuthintela ukuphinda ukhuphele umthwalo ofanayo - Ukunyamezela:
Restart=always,RestartSec=10— iyasinda kwiingozi kunye nokuqalisa kwakhona
Indawo checkmarx.zone yingxaki yokubhala eCheckmarx (inkampani yokhuseleko e checkmarx.com), yenzelwe ukuba abahlalutyi be-SOC abaphonononga iilog zenethiwekhi babone ukuthuthwa kwezinto ezibonakala ngathi ngumthengisi wokhuseleko osemthethweni. Le yindlela yokubaleka ngabom ehambelana necebo elibanzi leTeamPCP lokuzimela emva kophawu lomthengisi wokhuseleko.
Inqanaba lesi-3b: Intshukumo yeKubernetes esecaleni
Ukuba inkqubo esengozini ineziqinisekiso zeakhawunti yenkonzo yeKubernetes, i-malware ibala zonke ii-cluster nodes kwaye isebenzise iipodi ezinelungelo nganye nganye:
Ipodi nganye:
- Isebenza njenge nelungelo kunye
hostPID,hostNetwork, kunye nokufikelela ngokupheleleyo kwinkqubo yefayile yomsingathi - Usebenzisa
chroot /hostukufaka okufanayosysmon.pyucango lwangasemva kwinkqubo yefayile yengcambu yomsingathi - Iyayibhalisa njengenkonzo ye-systemd, iqinisekisa ukuba ukuqhubeka kwayo kuyasinda ekucinyweni kwe-pod
- Igama
node-setup-*kwikube-systemindawo yegama iza kubonakala njengeziseko ezisemthethweni zeqela
Oku kuthetha a umntu omnye oye wabandakanyeka kwisivumelwano CI/CD umgijimi onokufikelela kwi-K8s unokubangela ukuba yonke indawo kwi-cluster ivalwe ngasemva — imeko embi kakhulu yentshukumo esecaleni kwimibutho esebenzisa i-litelm njengommeli kwi-Kubernetes.
Uguquko lwePayload (Iinguqulelo ezivezwe kwiingxelo)
Ikhowudi yomthombo kwimigca 131-132 iqulethe iinguqulelo ezimbini zangaphambili zomthwalo womvuzo ezichazwe ngaphambili, ezityhila inkqubo yophuhliso lomhlaseli:
- Zonke iintlobo ezintathu babelane ngeziseko zophuhliso ezifanayo zokucoca amanzi (
models.litellm.cloud), isitshixo sikawonke-wonke se-RSA-4096, i-AES-256-CBC + i-RSA hybrid encryption wrapper, kunyetpcp.tar.gzamagama ephakheji - Iinguqulelo zangaphambili wongeze i Umaleko wokubethela we-RC4 ngaphakathi kwiskripthi sokuqokelelwa kwedatha, kubhala ngekhowudi idatha eqokelelweyo ngaphambi kwe-AES+RSA wrapper yangaphandle. Umthwalo osebenzayo (umgca 130) wenziwe lula ngokususa olu layer lwangaphakathi lwe-RC4
- Iindidi zangaphambili ziyasetyenziswa
exec()kunyeStringIOukubamba ukuze kuqhutywe umqokeleli kwinkqubo, ngelixa umthwalo osebenzayo usebenzisasubprocess.run()nge-stdout redirect — ukwahlula okucocekileyo okuthintela ukungcolisa inkqubo yomgcini - Zonke ezi ntlobo zintathu zijolise kwiindidi ezifanayo zeziqinisekiso kunye neendlela zokuqokelela
- Isitshixo se-RC4 kwiinguqulelo zangaphambili yayikukuthuka okubangela inkanuko, okuhambelana nokuziphatha komdlali weqonga ofuna ingqalelo kwiTelegram.
Oku kubonisa uphuhliso olusebenzayo ngexesha lomsebenzi. Umhlaseli wenze lula i-encryption stack kwaye waphucula ukwahlulahlula ukusebenza ngelixa egcina iithagethi zokuqokelela kunye neziseko zophuhliso ezizinzileyo.
Iimpawu zokuvumelana (ii-IOC)
womnatha
| Isalathisi | uhlobo | Injongo |
|---|---|---|
models.litellm.cloud | thambeka | Indawo yokuphela kohluzo (HTTPS POST) |
checkmarx.zone | thambeka | Isiphelo sokuvota se-C2 (HTTPS GET /raw) |
Qaphela: Amakhonkco engxelo angaphandle checkmarx.zone/static/checkmarx-util-1.0.4.tgz ukuya kwinqanaba langaphambili le-KICS lephulo le-TeamPCP. Le URL ayifumanekanga kwi-litellm payloads ehlalutyiweyo apha.
IiHashe zePhakheji
| ifayile | SHA256 |
|---|---|
litellm-1.82.7.tar.gz | 8a2a05fd8bdc329c8a86d2d08229d167500c01ecad06e40477c49fb0096efdea |
litellm-1.82.8.tar.gz | d39f4e7a218053cce976c91eacf184cf09a6960c731cc9d66d8e1a53406593a5 |
Inkqubo yeFayile
| Isalathisi | uhlobo | Injongo |
|---|---|---|
~/.config/sysmon/sysmon.py | ifayile | Iskripthi esingapheliyo sangasemva |
~/.config/systemd/user/sysmon.service | ifayile | Iyunithi yokuqhubeka kwenkqubo |
/tmp/pglog | ifayile | Ikhutshelwe i-binary yesigaba sesibini |
/tmp/.pg_state | ifayile | Ukulandelela imeko ye-C2 |
litellm_init.pth in site-packages/ | ifayile | I-Python startup hook (v1.82.8 kuphela) |
tpcp.tar.gz | ifayile | Iphakheji yokukhupha efihliweyo |
Kubernetes
| Isalathisi | uhlobo | Injongo |
|---|---|---|
node-setup-* iipodi ngaphakathi kube-system | IPod | Iipodi zokunyakaza ezisecaleni ezinelungelo |
sysmon.service kwii-cluster nodes | inkonzo | Ukunyamezela kwinqanaba lomgcini-ndawo ngokusebenzisa i-pod escape |
I-Cryptographic
| Isalathisi | iinkcukacha |
|---|---|
| Isitshixo sikawonke-wonke somhlaseli i-RSA-4096 | Umnwe weminwe we-SHA256: bc40e5e2c438032bac4dec2ad61eedd4e7c162a8b42004774f6e4330d8137ba8. Ifakwe kuzo zonke iintlobo ezintathu zomthwalo womthwalo; isitshixo esifanayo sixeliwe kwezinye iinkqubo zeTeamPCP |
tpcp isimaphambili kwizinto zakudala | Imigaqo yokubiza amagama eepakethe (tpcp.tar.gz) iyahambelana kulo lonke iphulo |
Isabelo: I-TeamPCP
Umntu osongelayo emva kweli phulo ulandelwa njengo Iqela lePCP, ekwaziwa ngokuba yi-PCPcat, iPersy_PCP, iShellForce, kunye neDeadCatx3.
Iimpawu ezaziwayo:
- Igcina iitshaneli zeTelegram kwi
@Persy_PCPkwaye@teampcpapho bagculela iinkampani zokhuseleko - Isebenza kwiindawo ezininzi ze-ecosystems (ii-GitHub Actions, i-PyPI, i-npm, i-OpenVSX)
- Isebenzisa iidomeyini zetyposquat ezilungiselelwe umthengisi kwisigaba ngasinye sephulo (umz.,
checkmarx.zonekwiCheckmarx,models.litellm.cloudye-litellm) - Iimpawu zeziseko zophuhliso ezihambelanayo: isibini se-RSA esibalulekileyo esifanayo,
tpcp.tar.gzisithethe sokubiza amagama,tpcp-docs-*Iindawo zokugcina izinto zeGitHub ezisetyenziswa njengeendawo zokugcina izinto ezifileyo - Ijolise kwizixhobo zokhuseleko njengeendawo zokungena kwiindlela zokubonelela ezisezantsi
Ukuzithemba kwe-attributionPhezulu. Isitshixo sikawonke-wonke se-RSA esabelwana ngaso, tpcp ukuqanjwa kwamagama ezinto zakudala, ukufana kweziseko ze-C2, kunye nesantya sokusebenza kulo lonke iphulo leentsuku ezintlanu kudibanisa kakhulu iTrivy, KICS, npm, OpenVSX, kunye ne-litellm kunye nomdlali ofanayo.
Isizathu: Kusenokwenzeka ukuba yimali (ubusela be-crypto wallet, ukwenza imali nge-cloud credential) kudityaniswe notoriety (Telegram taunting). Ububanzi bokuvuna i-credential — ukusuka kwi-AWS IAM ukuya kwi-Solana validator keypairs ukuya kwi-WireGuard configs — bubonisa umdlali onomdla wezezimali ofuna ukwandisa i-ROI kwisivumelwano ngasinye.
Uncedo olunokwenzeka lwe-AI: I-credential harvester ibanzi ngokwenkqubo — iindidi ezingaphezu kwe-15 kuquka iithagethi ze-niche ezifana ne-Cardano signing keys, ii-WireGuard configs, kunye nee-Kaniko Docker certificates — ngendlela ehambelana nokubalwa okuncediswa yi-AI. Isantya sokuphindaphinda umthwalo (iintlobo ezintathu ezinezicwangciso ezahlukeneyo zokubethela), ulungelelwaniso lwe-cross-ecosystem (ii-ecosystems ezi-5 kwiintsuku ezi-5), kunye ne-OPSEC esebenzayo (ii-domains ezizenza umthengisi, ukubethela okuxutyiweyo, ukuqhubeka kwenkqubo okufihliweyo njenge-telemetry) kubonisa inqanaba lokuphumelela elinokubonakalisa uphuhliso oluncediswa yi-AI njengomphindaphindi wamandla. Olu vavanyo luyinto eqikelelweyo; abaqhubi abanezakhono banokufikelela kwinqanaba elifanayo ngaphandle kwezixhobo ze-AI.
IiTTP ezintsha kunye neendlela
1. Ityhefu yeThreyini yoThutho lweZixhobo zoKhuseleko (uhlobo lwe-T1195.002)
Ukuskena ukhuseleko olungenamsebenzi (iTrivy, iKICS) njengesixhobo sokuqala ukufikelela kwiinjongo ezisezantsi kukunyuka okutsha. Lo mhlaseli akazange abeke emngciphekweni nje kuphela ithala leencwadi - babeke emngciphekweni izixhobo ezisetyenziswa yimibutho ukuze ukufumana Iilayibrari ezisengozini. Oku kudala indawo engabonakaliyo: iskena esifanele sibambe ikhowudi enobungozi yiyo ngokwayo indlela yokuhambisa.
2. Python .pth Ukuqina kweFayile (T1546)
The litellm_init.pth indlela ekwi-v1.82.8 iyingozi kakhulu. I-Python .pth iifayile kwi site-packages/ ziyacutshungulwa kuyo yonke i-startup yetoliki; nawuphi na umgca oqala ngo import isetyenziswa njengekhowudi. Ngokubophelela umthwalo wentlawulo kwi-single import Ingxelo, umhlaseli ufezekisa ukuphunyezwa kuyo yonke inkqubo yePython - kungekuphela nje xa i-litelm ingenisiwe. Oku kuthetha ukuba umthwalo uyavutha nokuba i-litelm ifakiwe kodwa ayizange isetyenziswe, kwaye iyasinda ekulungisweni okuthatha indawo ye-compromised. .py iifayile ngaphandle kokujonga .pth iifayile.
3. Intshukumo yeLateral yeKubernetes ebanzi ngePrivileged Pod Deployment (T1610, T1611)
Ukudalwa ngokuzenzekelayo kwee-pods ezinelungelo kwi-node nganye yeqela — kunye hostPID, hostNetwork, ukukhweza inkqubo yefayile yomsingathi, kunye chroot ukufaka i-resistance — ukuthunyelwa kwee-chains container (T1610) kunye ne-escape to host (T1611) ukuguqula umthwalo womsebenzi omnye osengozini ube yi-full cluster compromise.
4. Iziseko zophuhliso ze-C2 ezizenza abathengisi
usebenzisa models.litellm.cloud (zilinganisa i-litellm) kunye checkmarx.zone (imics Checkmarx) njengoko ii-endpoints ze-C2/exfil zenzelwe ukuphepha ukujongwa kwenethiwekhi. Abahlalutyi be-SOC abaphonononga ithrafikhi yokuphuma baya kubona unxibelelwano lwe-HTTPS kwizinto ezibonakala ngathi ziidomeyini zabathengisi ezifanelekileyo.
5. Ukuphindaphinda komthwalo wePayload okhawulezayo ngaphakathi kwinqwelomoya
Ukupapasha i-v1.82.7 kunye nokuphunyezwa kwexesha lokungenisa, emva koko i-v1.82.8 kunye nokuphunyezwa kwexesha lokuqalisa emva kwemizuzu eli-13, kubonisa ukuba umhlaseli ubeka esweni kwaye ehlengahlengisa ngexesha langempela. Iinguqulelo zomthwalo ophawulweyo (ezinezicwangciso ezahlukeneyo zokubethela) ezigcinwe kwikhowudi yomthombo ziqinisekisa uphuhliso olusebenzayo ngexesha lokusebenza.
Yintoni Enokwenziwa
Olu hlaselo lusebenzisa ukuthembana kuzo zonke iileya: ukuthemba izixhobo zokhuseleko, ukuthemba iirejista zeepakeji, ukuthemba iindawo eziqhelekileyo, ukuthemba CI/CD Ukuzikhusela kuyo kufuna ukuqinisa yonke imida yokuthembana:
Kwabathengi beePakeji
- Ukuxhomekeka kwePin nge-hash, kungekuphela nje kwinguqulelo.
pip install litellm==1.82.6 --hash=sha256:...ngebeyithintele ukuba iinguqulelo ezisengozini zingafakwa nokuba zivele okwethutyana njengenguqulelo yamva nje. - Sebenzisa iifayile zokutshixa.
pip-compile,poetry.lock, yayeuv.lockbamba iinguqulelo ezichanekileyo kunye nee-hashes. CI/CD kufuneka ifakelwe kwiifayile zokutshixa, kungekhona kwiinkcukacha zenguqulo ezidadayo. - Ukubeka esweni
.pthiifayile. Uphicotho rhoqosite-packages/ngokungalindelekanga.pthiifayile — ziyasebenza kuyo yonke iPython startup kwaye ziyindlela yokuqhubeka engaxatyiswanga. - Sebenzisa ulawulo lwenethiwekhi yokuphuma. Ukuphuma kwi-
models.litellm.cloudkunye nokuvota kwe-C2 ukuyacheckmarx.zoneisenokuba ibanjwe kukucoca okusekelwe kuluhlu oluvunyelweyo kwiindawo zemveliso.
Kwabagcini beePakeji
- pin CI/CD iintshukumo nge commit SHA, hayi i-tag. IiLiteLLM pipeline ndisebenzise iTrivy ngaphandle kwenguqulelo ephiniweyo. Ukuba ibibhekisele kuyo
aquasecurity/trivy-action@<commit-sha>ngaphandle kwe@latest, isenzo esithintelweyo besingayi kuphunyezwa. - Sebenzisa iithokheni zokushicilela ezihlala ixesha elifutshane nezinemida. I-PyPI ixhasa abaPapashi abaThembekileyo (abasekwe kwi-OIDC) kunye neethokheni ze-API ezikhutshiweyo.
PYPI_PUBLISHithokheni bekungafanele ukuba ibe nokufikelela kokushicilela okuhlala ixesha elide, okungenamida. - Nika amandla ukuqinisekiswa kwezinto ezimbini kwi-PyPI. Funa i-2FA kubo bonke abagcini bezixhobo kwaye usebenzise amaqhosha okhuseleko lwehardware apho kunokwenzeka khona.
- Sayina iipakethe. Iziqinisekiso zeSigstore/PEP 740 zivumela abathengi ukuba baqinisekise ukuba iphakheji yakhiwe yi-elindelekileyo CI/CD pipeline, kungekhona ngumhlaseli onethokheni ebiweyo.
KwabaSebenzisi bePlatform (PyPI, npm, GitHub)
- Fumana iipateni zokupapasha ezingaqhelekanga. Iinguqulelo ezimbini ezintsha ezipapashwe imizuzu eli-13 ukusuka kwenye, kwi-IP eyahlukileyo okanye kwi-token kunesiqhelo, kufuneka ziqalise ukubanjwa okanye ukuskenwa ngokuzenzekelayo ngaphambi kokuba iphakheji ifakeke.
- Khawulezisa ukwamkelwa kwabaPapashi abaThembekileyo. Upapasho olusekelwe kwi-OIDC ludibanisa iipakethe kwiindawo ezithile zokugcina izinto kunye nemisebenzi yokusebenza, okwenza amathokheni abiweyo angabi namsebenzi ngaphandle kweyokuqala CI/CD umxholo.
- Sebenzisa ukuskena kwe-malware ngexesha lokushicilelwa. I-base64-decoded payload kwi-proxy_server.py iya kubonwa ngohlalutyo oluzinzileyo ngexesha lokupapashwa.
Kwinkqubo yendalo
- Phatha izixhobo zokhuseleko njengeziseko ezibalulekileyo. I-Trivy kunye ne-Checkmarx KICS zisetyenziswa zizigidi zabantu pipelines. Izenzo zabo zeGitHub kufuneka zisayinwe, zifakwe ikhowudi, kwaye zijongwe ngobuchule obufanayo neepakeji abaziskenayo.
- Tyala imali ekufumaneni ixesha lokusebenza. Uhlalutyo oluzinzileyo lodwa alunakukwazi ukubamba zonke iindlela zokungacaci. Ukubeka iliso ngexesha lokusebenza kokufakwa kwephakheji hooks, uqhagamshelo lwenethiwekhi olungalindelekanga, kunye neendlela zokufikelela kwiifayile ezikrokrisayo zibonelela ngokhuseleko olunzulu.
- Yabelana ngolwazi lwezoyikiso ngokukhawuleza. Ixesha lokuvezwa kwe-litellm leeyure ezi-5.5 ngebelinokuba lifutshane xa kukho ulungelelwaniso olukhawulezayo phakathi kwabathengisi. Iinkonzo zokuskena ezizenzekelayo ezifana ne-Xygeni MEW, i-Socket, kunye ne-Snyk zibone into engaqhelekanga - ingxaki kukuba umntu uqinisekisa ixesha lokuphendula kwirejista.
isiphelo
Iphulo leTeamPCP lithuba elibalulekileyo software supply chain securityNgokubeka emngciphekweni izikena zokhuseleko kuqala nokuzisebenzisa njengeenyathelo zokuya kwiziseko zophuhliso ze-AI ezixabisa kakhulu, abahlaseli babonise ukuba uthungelwano lokubonelela luqinile kuphela xa luxhomekeke kakhulu ekuguqukeni, kwaye olo xhomekeko lusenokuba sisixhobo sokhuseleko osithembayo ukuba siza kukugcina ukhuselekile.
Isivumelwano se-litellm sigxininisa ngokukodwa umngcipheko okhulayo kwiziseko zophuhliso ze-AI. Njengoko ii-LLM proxy gateways ziba yi- standard iphethini ye enterprise Ukusasazwa kwe-AI, bagxila ekufikeleleni kwizitshixo ze-API, iziqinisekiso zelifu, kunye nedatha ebucayi kwicandelo elinye. Ukubeka elo candelo esichengeni sisitshixo esibalulekileyo kuyo yonke i-AI stack.
Imibutho efake i-litellm 1.82.7 okanye i-1.82.8 ngexesha leeyure ezi-5.5 kufuneka iphathe oku njengesivumelwano esipheleleyo sokuqinisekisa: jikelezisa zonke iimfihlo kwiinkqubo ezichaphazelekayo, uhlole amaqela e-Kubernetes ukuze node-setup-* iipodi ngaphakathi kube-system, susa nayiphi na sysmon.service iiyunithi ze-systemd, kwaye ujonge litellm_init.pth kwiPython site-packages/ ii-directory. Abasebenzisi bomfanekiso osemthethweni weDocker (ghcr.io/berriai/litellm) azichaphazelekanga, njengoko umfanekiso ubophelele ukuxhomekeka kwawo kwaye awuzange wakhiwe kwakhona ngexesha lefestile yokubonisa.
Malunga uMbhali
Umseki kunye neCTO
Louis Rodriguez nguMseki-qela kunye ne-CTO kwiXygeni Security. Uneminyaka engaphezu kwama-20 ekukhuseleko lwezicelo, ugxila kukhuseleko lwe-AppSec kunye nobuchule obuphambili bohlalutyo lwekhowudi obunceda amaqela ukunciphisa umngcipheko wokwenyani wokuhanjiswa kweenkonzo.
