Malicious LiteLLM version 1.107.0 executes a credential stealer called privcollect via a cook.pth file that automatically runs cook.py whenever Python starts.

From the articleLiteLLM supply chain attack hoovers up passwords and secretsAlso in LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor, LiteLLM supply-chain attack targets credentials and installs a RAT | Межа