LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The popular LiteLLM Python package has been compromised in a software supply chain attack that delivered a credential stealer and a backdoor, The Hacker News reports, citing SafeDep, Socket, StepSecurity and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images, and the package has since been quarantined on PyPI.