Python stories

LiteLLM supply chain attack distributes malware stealing credentials and remote access trojan

Unknown attackers compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) through PyPI and Docker registries containing malware designed to steal cloud and AI credentials plus a remote access trojan capable of executing arbitrary code. Users who ran the compromised version should treat their secrets as compromised.