LiteLLM 1.107.0 on PyPI shipped a credential stealer and hourly remote-code loader, says SafeDep, a supply chain security vendor. BerriAI says it hardened releases after a March incident, yet an attacker with developers' GitHub CLI tokens ran its release workflow on a lookalike repo. BerriAI says the tokens came from logs of an internal LiteLLM deployment exposed online; entry point unconfirmed. Pin 1.106.2 and rotate secrets.
https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
SafeDep - Real-time Open Source Software Supply Chain SecurityCompromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and BackdoorLiteLLM 1.107.0 on PyPI ships a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start. How the implant got in, what it steals, and indicators of compromise.