Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Summary
The SafeDep article documents a compromised PyPI release of LiteLLM 1.107.0 that installed three files in site-packages, including a credential stealer and a backdoor, detailing payloads, how the attack happened, timeline, and IOCs. PyPI removed the release and SafeDep assesses an attacker-controlled pipeline as the likely cause. This serves as a case study for software supply chain risk and timely incident response.