The LiteLLM credential stealer targets API keys for OpenAI, Anthropic, and Cohere, along with proxy saved credentials and model configurations.

From the articleLiteLLM supply-chain attack targets credentials and installs a RAT | МежаAlso in LiteLLM supply chain attack hoovers up passwords and secrets, LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor