On October 21, 2026, attackers published a malicious version 1.107.0 of LiteLLM, a popular open-source Python gateway for calling AI models, carrying a credential stealer and a backdoor