LiteLLM hit by supply chain attack, implanted with credential stealer and backdoor

The popular Python package LiteLLM suffered a supply chain attack: version 1.107.0 was implanted with a credential stealer and backdoor when distributed via PyPI wheel and Docker images. The package has now been quarantined on PyPI, and the malicious Docker images have been removed. SafeDep, Socket, StepSecurity and Upwind reported the incident. LiteLLM security lead Oliver Jensen said the malicious operations were carried out through the GitHub accounts of three engineers, suspected to have exploited stolen GitHub CLI OAuth tokens, using one account to trigger the release process and another to approve it; all related tokens have been revoked, and the mechanism by which the attackers obtained the tokens has not yet been determined. Users who have downloaded this version are advised to revoke and replace exposed credentials in a clean environment and to pin to version 1.106.2 using the digest.