LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package was compromised in a software supply chain attack affecting version 1.107.0. The malicious package was distributed via PyPI wheels and Docker images, delivering both a credential stealer and a backdoor. The compromise was discovered and reported by multiple security firms including SafeDep, Socket, StepSecurity, and Upwind. PyPI has since quarantined the affected package to prevent further installations. This incident highlights ongoing risks in open-source package ecosystems, particularly for AI/LLM tooling. Organizations using LiteLLM 1.107.0 should consider their environments potentially compromised and rotate credentials.