LiteLLM & Trivy Supply Chain Attack
What it is & what to do.

# ClawSwitch IOC Scanner — TeamPCP supply chain
# PowerShell: Windows

Write-Host "[clawswitch] scanning..." -ForegroundColor Cyan
Write-Host "──────────────────────────────────────────────"

# --- LiteLLM version ---
try {
  $out = pip show litellm 2>$null
  if ($out) {
    $ver = ($out | Select-String "Version").ToString().Split(" ")[1].Trim()
    if ($ver -in @("1.82.7","1.82.8")) {
      Write-Host "[CRITICAL] litellm==$ver COMPROMISED — rotate all credentials NOW" -ForegroundColor Red
    } else { Write-Host "[OK]       litellm==$ver — clean" -ForegroundColor Green }
  } else { Write-Host "[INFO]     litellm not installed" -ForegroundColor Gray }
} catch { Write-Host "[INFO]     pip not available" -ForegroundColor Gray }

# --- litellm_init.pth ---
$pth = Get-ChildItem -Path $env:USERPROFILE,$env:APPDATA -Filter "litellm_init.pth" -Recurse -ErrorAction SilentlyContinue
if ($pth) { $pth | ForEach-Object { Write-Host "[CRITICAL] $($_.FullName)" -ForegroundColor Red } }
else { Write-Host "[OK]       litellm_init.pth not found" -ForegroundColor Green }

# --- Trivy version ---
try {
  $tv = trivy --version 2>$null
  if ($tv -match '(\d+\.\d+\.\d+)') {
    $ver = $Matches[1]
    if ($ver -eq "0.69.4") { Write-Host "[CRITICAL] trivy==$ver COMPROMISED" -ForegroundColor Red }
    else { Write-Host "[OK]       trivy==$ver — clean" -ForegroundColor Green }
  }
} catch { Write-Host "[INFO]     trivy not installed" -ForegroundColor Gray }

# --- C2 hunt: DNS cache + PS history ---
Write-Host "──────────────────────────────────────────────"
Write-Host "[clawswitch] hunting C2 indicators..." -ForegroundColor Cyan

$c2 = @("models.litellm.cloud","checkmarx.zone","scan.aquasecurtiy.org",
        "plug-tab-protective-relay.trycloudflare.com",
        "83.142.209.11","45.148.10.212","46.151.182.203")

$dnsCache = Get-DnsClientCache -ErrorAction SilentlyContinue | Out-String
$psHist   = Get-Content "$env:APPDATA\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt" -Raw -ErrorAction SilentlyContinue

foreach ($ioc in $c2) {
  if ($dnsCache -match [regex]::Escape($ioc) -or $psHist -match [regex]::Escape($ioc)) {
    Write-Host "[CRITICAL] IOC found: $ioc" -ForegroundColor Red
  } else {
    Write-Host "[OK]       No hits: $ioc" -ForegroundColor Green
  }
}

Write-Host "──────────────────────────────────────────────"
Write-Host "[clawswitch] done → clawswitch.io" -ForegroundColor Cyan

#!/usr/bin/env python3
# ClawSwitch IOC Scanner — cross-platform (macOS / Linux / Windows) 

import subprocess, pathlib, sys, shutil, re

R="\033[91m"; G="\033[92m"; C="\033[96m"; D="\033[90m"; X="\033[0m"
ok  = lambda m: print(f"{G}[OK]      {X} {m}")
crit= lambda m: print(f"{R}[CRITICAL]{X} {m}")
info= lambda m: print(f"{D}[INFO]    {X} {m}")
div = lambda  : print(f"{C}{'─'*46}{X}")

print(f"\n{C}[clawswitch] TeamPCP supply chain IOC scanner{X}"); div()

# LiteLLM version
try:
  r = subprocess.run(["pip","show","litellm"], capture_output=True, text=True)
  vl = [l for l in r.stdout.splitlines() if l.startswith("Version")]
  if vl:
    v = vl[0].split(":")[1].strip()
    crit(f"litellm=={v} COMPROMISED. Rotate all credentials.") if v in ("1.82.7","1.82.8") else ok(f"litellm=={v} clean")
  else: info("litellm not installed")
except: info("pip unavailable")

# litellm_init.pth
pth = [f for p in sys.path for f in (pathlib.Path(p).rglob("litellm_init.pth") if pathlib.Path(p).exists() else [])]
[crit(f"litellm_init.pth: {f}") for f in pth] if pth else ok("litellm_init.pth not found")

# Trivy version
if shutil.which("trivy"):
  r = subprocess.run(["trivy","--version"], capture_output=True, text=True)
  m = re.search(r'(\d+\.\d+\.\d+)', r.stdout)
  if m: crit(f"trivy=={m.group(1)} COMPROMISED") if m.group(1)=="0.69.4" else ok(f"trivy=={m.group(1)} clean")
else: info("trivy not installed")

div(); print(f"{C}[clawswitch] hunting C2 indicators...{X}")

C2=["models.litellm.cloud","checkmarx.zone","scan.aquasecurtiy.org",
    "plug-tab-protective-relay.trycloudflare.com","tpcp-docs",
    "83.142.209.11","45.148.10.212","46.151.182.203"]

home = pathlib.Path.home()
scan_paths = [
  home/".bash_history", home/".zsh_history",
  home/"AppData/Roaming/Microsoft/Windows/PowerShell/PSReadLine/ConsoleHost_history.txt",
  pathlib.Path("/tmp")
]

for ioc in C2:
  hits=[]
  for p in scan_paths:
    try:
      if p.is_file() and ioc in p.read_text(errors="ignore"): hits.append(str(p))
      elif p.is_dir():
        [hits.append(str(f)) for f in p.iterdir() if f.is_file() and ioc in f.read_text(errors="ignore")]
    except: pass
  crit(f"IOC [{ioc}] in {hits}") if hits else ok(f"No hits: {ioc}")

div(); print(f"{C}[clawswitch] done → clawswitch.io{X}\n")