LiteLLM's PyPI package and Docker images compromised

CERT-In issued security advisory CIAD-2026-0053, stating that the PyPI package for LiteLLM 1.107.0 and the Docker images hosted on GHCR and Docker Hub suffered a supply chain compromise. According to the incident analysis cited in the advisory, attackers used the impersonating repository Berri-AI/litellm to trigger the release process, modified pyproject.toml, and injected cook.pth, cook.py and sitecustomize.py into the Python site-packages, leveraging the interpreter startup mechanism to execute code without the application explicitly importing LiteLLM. The advisory recommends checking hosts that installed this version and environments that pulled the related images, rebuilding containers from verified clean images, and rotating related credentials, listing 1.106.2 as a clean version.