Security firms Aikido, Wiz, Socket, and StepSecurity released threat-hunting instructions advising teams using LiteLLM 1.107.0 to stop deployment and investigate Python environments.

From the articleLiteLLM supply chain attack hoovers up passwords and secretsAlso in LiteLLM supply-chain attack targets credentials and installs a RAT | Межа, LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor