LiteLLM Hit by Supply Chain Attack via Compromised Release Pipeline

LiteLLM disclosed that threat actors bypassed multiple security controls to distribute a malicious package version containing credential stealers and backdoors via PyPI and Docker Hub. The release pipeline compromise is suspected to stem from a leaked GitHub token, granting attackers unauthorized infrastructure access. Administrators using affected versions should immediately rotate credentials and audit systems.