LiteLLM 1.107.0 poisoned on PyPI and Docker in supply chain attack via stolen GitHub CLI tokens
On October 21, attackers published a malicious LiteLLM version 1.107.0 to PyPI and Docker Hub. LiteLLM is a widely used open source proxy for routing requests across LLM providers. The packages were live for about three hours and were downloaded an estimated 49,000+ times before being removed or repointed to clean artifacts. They install …