Skip to content

WARNING.md

Latest commit

 

History

History
33 lines (22 loc) · 2.07 KB

WARNING.md

File metadata and controls

33 lines (22 loc) · 2.07 KB

WARNING - Read Before Proceeding

This repository contains REAL malware

The malware-samples/ directory contains the actual compromised litellm packages (versions 1.82.7 and 1.82.8) that were published to PyPI on March 24, 2026 by the threat actor TeamPCP.

These files are dangerous. If installed and executed, they will:

  1. Steal all credentials on the machine: SSH keys, AWS/GCP/Azure credentials, Kubernetes configs, database passwords, API keys, cryptocurrency wallets, .env files, shell history
  2. Encrypt and exfiltrate stolen data to attacker-controlled servers
  3. Deploy privileged Kubernetes pods on every node in any accessible cluster
  4. Install a persistent backdoor that polls a C2 server every 50 minutes
  5. Query EC2 IMDS to steal IAM role credentials and dump AWS Secrets Manager / SSM Parameter Store

Rules for handling these files

  1. NEVER run pip install on these .whl files on any machine with real credentials
  2. NEVER run these files outside a disposable, isolated environment (fresh EC2 instance with no IAM role)
  3. NEVER extract and execute the Python files directly on your machine
  4. ALWAYS verify SHA-256 hashes before analysis (see malware-samples/README.md)
  5. ALWAYS destroy the analysis environment when done

Safe analysis methods

  • Extract .whl files using zipfile in Python (a .whl is a zip archive)
  • Read the decoded payloads in malware-samples/decoded-stage*.py - these are plaintext Python, safe to read but not to execute
  • Use the lab scripts in lab/scripts/ to set up an isolated EC2 environment

Legal disclaimer

This repository is published for educational and defensive security purposes only. The malware samples are provided to enable security researchers, incident responders, and defenders to understand the attack, develop detection rules, and learn about supply chain attack vectors.

The authors are not responsible for any misuse of the materials in this repository. By accessing these files, you agree to use them only for lawful, defensive, and educational purposes.