Python Malware

LiteLLM Supply Chain Attack Exposes AI Credentials Through Malicious 1.107.0 Release

LiteLLM's release pipeline was compromised on October 21, allowing attackers to distribute malicious 1.107.0 packages through PyPI and container registries. The malware targeted cloud credentials, AI-provider keys and developer secrets, prompting urgent recovery guidance.