What happened

The 1.107.0 release of LiteLLM, a popular open-source LLM proxy library, was compromised on PyPI. According to an analysis by security firm SafeDep, the version runs an installer that drops a backdoor collecting and exfiltrating credentials from the host system.

Why it matters

LiteLLM is widely used to connect to different AI models through a single interface. Libraries like this typically run alongside API keys, cloud access tokens and database passwords, so a compromised release can hand all of that to an attacker.

What to do

  • Remove the package from any environment that installed 1.107.0 and pin to a verified release.
  • Rotate API keys, access tokens and passwords used in those environments.
  • Lock your dependency files and verify package versions with signatures or hashes.

This is the latest supply chain attack against the AI tooling ecosystem. The source text does not detail how the compromise occurred.