LiteLLM 1.107.0 release hijacked in supply-chain attack that stole credentials and loaded a backdoor
A malicious LiteLLM 1.107.0 build, pushed to PyPI and public Docker registries via stolen developer tokens, planted a credential stealer and a backdoor in the popular open-source LLM proxy.
- Victim
- LiteLLM