Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Summary
LiteLLM 1.107.0 on PyPI delivered a credential stealer and a backdoor; three files were installed into site-packages and loaded at Python startup, enabling data exfiltration of credentials and remote code execution. SafeDep analysis indicates the release was crafted from attacker-controlled source and the wheel contents match a compromised commit; PyPI removed the release. The article details payloads, timeline, indicators of compromise, and mitigations for supply-chain security.