search
Python Package Index
Trends
- 1Compromised LiteLLM 1.107.0 on PyPI Delivered Credential Stealer●Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
Version 1.107.0 of LiteLLM published to the Python Package Index was compromised, installing a credential stealer and backdoor on systems that downloaded it. Developers who pulled the package during the affected window are urged to rotate API keys and secrets immediately. The incident renews concern about supply-chain attacks against popular open-source packages.