Unknown crims compromised LiteLLM release process on Wednesday, distributing a malicious version 1.107.0 containing malware designed to steal cloud and AI credentials and a remote access trojan RAT capable of executing arbitrary code on infected machines through PyPI and Docker registries. PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image litellm litellm:1.107.0 was removed from both Docker Hub and GHCR soon after but anyone who ran...
