LiteLLM 1.107.0 was compromised on Oct 21 and distributed a credential stealer via PyPI and container images. The incident reportedly followed a temporary expansion of release permissions on Oct 19. Teams running LiteLLM should treat API keys and cloud credentials as exposed and rotate, while pinning to a known-good build. #SupplyChain #CredentialTheft #CloudSecurity
https://cyberworldops.eu/en/compromised-litellm-11070-release-deployed-a-credential-stealer
CyberWorldOpsCompromised LiteLLM 1.107.0 Spread Credential StealerCompromised LiteLLM v1.107.0 distributed credential-stealing code via PyPI and containers; researchers reported stolen AWS credentials were tested.