Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...
Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.