LiteLLM Supply Chain Compromise: Malicious Python Package Delivers Credential Stealer
LiteLLM version 1.107.0 compromised on PyPI and Docker Hub. Attackers exploited GitHub token to push malicious payload with credential stealer and backdoor to SDK supply chain.
Read original coverage