LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The widely used LiteLLM Python package was compromised in version 1.107.0, distributed via PyPI and Docker images. The malicious build included a credential stealer and a backdoor. Administrators who deployed this version must immediately audit their environments, rotate API keys and credentials, and update to a remediated version as the package has been quarantined.