LiteLLM 1.107.0 on PyPI tampered with credential stealer and backdoor

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

LiteLLM 1.107.0 on PyPI carried a credential stealer and a remote code execution backdoor, and the version has now been removed. All seven wheels shipped the malicious file, which runs when a Python process starts. It steals cloud credentials, AI tool tokens and model provider API keys even if the process never imports litellm.

Why it matters: SafeDep traces how the malicious LiteLLM package starts, showing that Python processes which never import the library still trigger the attack and expose host credentials.