Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

In this article Attack overview Technical detailsMitigation and protection guidanceIndicators of compromiseReferencesLearn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index (PyPI) and distributed through official container images. The malicious package added files that Python could execute... Weiterlesen: Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft …