LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

LiteLLM 1.107.0 was compromised in a supply chain attack that delivered a credential stealer and backdoor, according to SafeDep, Socket, StepSecurity, and Upwind. The malicious code was distributed through PyPI wheels and Docker images. The package has been quarantined on the Python Package Index, and the attack is under investigation.