Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
The 1.107.0 release of LiteLLM on PyPI was compromised and installs a backdoor that steals credentials, according to a SafeDep analysis. Developers and organizations using the popular LLM proxy library are at risk. Users who installed the version are advised to remove it and rotate their credentials.