LiteLLM release pipeline compromised to distribute info-stealing malware
The LiteLLM release pipeline was compromised, and version 1.107.0 and malicious Docker images were published through PyPI and container registries. The payload stole credentials, secrets, and environment variables. All LiteLLM 1.107.0 PyPI wheels were affected on Windows, Linux, and macOS systems.
CERT24