LiteLLM suffers another supply chain attack: malicious version 1.107.0 can steal credentials and keys

According to Slow Fog's disclosure, LiteLLM has once again encountered a supply chain attack, with the malicious version litellm@1.107.0 affecting PyPI packages and Docker images, including floating tags such as latest and main-stable.

The injected malicious code will automatically execute upon Python startup, stealing sensitive data such as cloud credentials, AI API keys, SSH private keys, and supporting remote code execution. The affected versions have been removed or replaced. Slow Fog recommends that users avoid using version 1.107.0, rebuild the affected environment from a clean image, rotate potentially leaked credentials, and pin the version to 1.106.2.