Installed LiteLLM on Wednesday lunchtime? Assume your credentials are gone. Every 1.107.0 wheel and the Docker images carried a credential stealer and a loader that fire whenever Python starts.
The pipeline was never broken: stolen GitHub tokens from three engineers drove it, aimed at a lookalike fork a hyphen from the real one. The malicious builds came out signed, with genuine provenance. It is the project's second compromise this year.
BleepingComputerLiteLLM release pipeline hacked to distribute info-stealer malwareHackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.