Supply Chain Attack Compromises LiteLLM Python Package with Credential Stealer and Backdoor

The LiteLLM Python package version 1.107.0 was compromised through a supply chain attack, distributing a credential stealer and backdoor via PyPI wheels and Docker images. The affected package has been quarantined on PyPI following the incident.

The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind.

The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the

Read original article