LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

A software supply chain attack has compromised the LiteLLM Python package, resulting in the delivery of a credential stealer and a backdoor. The affected version is LiteLLM 1.107.0, which was distributed through PyPI wheels and Docker images. The compromise was reported by multiple sources, including SafeDep, Socket, StepSecurity, and Upwind. As a result, the LiteLLM package has been quarantined on the Python Package Index. The attack highlights a vulnerability in the software supply chain, allowing malicious actors to distribute malware through a popular package. The quarantine of the package is intended to prevent further distribution of the malicious code.