Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Source
safedep.io
Author
abhisek
Date
Why it matters
Anyone with LiteLLM 1.107.0 installed had a credential stealer and remote backdoor execute on every Python start. Check environments for the files and IOCs listed, rotate exposed secrets, and pin or verify dependencies.
