Wiz details LiteLLM supply chain attack: malicious v1.107.0 steals credentials

Wiz 披露 LiteLLM PyPI 包供应链攻击，恶意版本 v1.107.0 窃取凭据

Wiz says a malicious PyPI release of LiteLLM, version 1.107.0, runs a credential stealer when Python starts, and the related Docker images are affected too. The stealer collects browser and cloud credentials plus keys for OpenAI, Anthropic and other services, and queries the LiteLLM Proxy database directly for provider keys, encrypting everything before sending it to www.litellm.dev/healthcheck.

Why it matters: The malicious LiteLLM package steals credentials at Python startup, reaching cloud services, AI providers and keys held in the proxy database.