Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Security researchers discovered that the LiteLLM package version 1.107.0 uploaded to the Python Package Index was malicious. The compromised release includes code that harvests user credentials and opens a backdoor, allowing unauthorized access. The incident highlights supply‑chain risks in open‑source libraries and prompts calls for stricter vetting of published packages. The malicious code was identified by analysts, leading to package's removal and warning to developers.