LiteLLM compromised in a fresh supply-chain attack

Malicious LiteLLM version 1.107.0 packages were available on PyPI and Docker for roughly three hours and were estimated to have been downloaded more than 49,000 times. The packages contained malware functioning as an information stealer and a remote access trojan (RAT).