PyPI quarantined LiteLLM version 1.107.0 within hours of publication, and Docker images were removed from Docker Hub and GitHub Container Registry.

From the articleLiteLLM supply-chain attack targets credentials and installs a RAT | МежаAlso in LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor, LiteLLM supply chain attack hoovers up passwords and secrets