Compromised LiteLLM software used in a supply-chain attack to deliver a credential stealer and backdoor

The LiteLLM Python package version 1.107.0 was compromised in a software supply-chain attack. The version distributed as PyPI wheels and Docker images contained a credential stealer named “privcollect” and backdoor functionality.