LiteLLM (BerriAI)

Stories

Compromised LiteLLM release on PyPI and Docker installs credential stealer and backdoor

Published its attack-chain account on October 23; advising users to pin to 1.106.2 and rotate credentials

LiteLLM published a malicious version 1.107.0 on October 21 and pulled it about two hours later. It carried a credential stealer that ran whenever Python started, even in programs that never imported the library, plus a backdoor that checked a GitHub repository for instructions.

Updated Oct 30