LiteLLM release pipeline hacked to distribute info-stealer malware

Attackers compromised the LiteLLM project’s release pipeline, publishing malicious PyPI packages and Docker images. The compromised builds contain a payload designed to exfiltrate sensitive credentials, API keys, and environment variables. Administrators who pulled recent versions should immediately audit their systems for potential compromise.