LiteLLM 1.107.0 on PyPI and Docker shipped a credential stealer and backdoor
Attackers published a tampered LiteLLM 1.107.0 release that steals cloud, AI and proxy credentials on every Python start. Users should pin 1.106.2 and rotate all reachable secrets.