LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM supply chain attack distributes malware stealing credentials and remote access trojan

Unknown attackers compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) through PyPI and Docker registries containing malware designed to steal cloud and AI credentials plus a remote access trojan capable of executing arbitrary code. Users who ran the compromised version should treat their secrets as compromised.