Compromised LiteLLM Release Used Python Startup Hooks to Steal Credentials

Microsoft reported that malicious LiteLLM 1.107.0 packages reached PyPI and official container images on October 21. The payload could run when Python started, without an application importing LiteLLM, and targeted credentials from developer tools, cloud environments, browsers and AI systems.

Find out all the ways that you can
Contribute