Malicious LiteLLM version 1.107.0 executes a credential stealer called privcollect via a cook.pth file that automatically runs cook.py whenever Python starts.